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FOREWORD 


The  goal  of  Range  Safety  Is  to  prevent  injury  of  personnel  or 
damage  to  property  by  taking  all  reasonable  precautions  consistent  with 
operational  requirements.  Achievement  of  this  goal  begins  early  in  the 
evaluation  of  a proposed  test  program,  in  fact,  in  many  instances  prior 
to  the  definition  and  design  of  the  range  safety  system  that  will  be 
used  during  real-time  operation.  To  ascertain  the  degree  of  protection 
required,  the  system  to  be  tested  must  be  evaluated  to  determine  the 
geographic  boundaries  and  makeup  of  the  test  area.  If  the  area  contains 
nG  facilities  or  personnel,  no  precautions  are  necessary  other  than 
surveillance  of  the  area  to  ensure  that  It  remains  clear  during  the 
test.  But,  if  the  test  area  is  large  and  contains  facilities  and  per- 
sonnel, it  is  necessary  to  determine,  either  by  qualitative  or  quan- 
titative analysis,  those  hazards  produced  by  the  test.  The  results  of 
this  analysis  will  define  the  level  of  risk  and,  therefore,  the  restric- 
tions that  must  be  placed  on  the  test  program  or  the  risk  that  must  be 
accepted  in  order  for  the  tests  to  be  conducted. 

A survey  of  five  of  the  test  ranges  represented  in  the  Range  Safety 
Group  (RSG),  Range  Commanders  Council  (RCC),  was  made  to  determine  the 
types  of  risk  analyses  conducted  and  the  uses  to  which  risk  data  are  put 
in  developing  test  restrictions.  This  Information  is  presented  in  this 
document  to  provide  all  ranges  with  the  various  techniques  employed 
which  may  have  merit  for  their  application.  A general  section  introducing 
the  subject  of  risk  analysis  has  been  prepared;  however,  there  is  no 
intent  to  establish  a standard  model  for  performing  risk  analysis  applic- 
able for  all  ranges. 


1.0  INTRODUCTION 

1 . 1 BACKGROUND 

Task  RS-2,  Risk  Analysis  Techniques,  was  adopted  by  the  Ranee  Safety 
Group  at  their  40th  meeting  held  at  Fort  Bliss,  Texas,  31  August  - 
2 September  1976,  and  subsequently  approved  by  the  Range  Commanders 
Council  in:  October  1976.  The  ad  hoc  committee  appointed  by  the  RSG  for 
task  accomplishment  met  in  March  1977  at  the  Tactical  Fighter  Weapons 
Center,  Nellis  Air  Force  Base,  Nevada,  to  discuss  risk  analysis  tech- 
niques and  to  formulate  the  method  for  task  accomplishment. 


1.2  SCOPE  AND  OBJECTIVE 


l. 


The  purpose  of  this  document  is  to  discuss  the  subject  of  risk  analysis 
in  the  general  sense,  i.e.,  input  data  required,  assumptions  made  and 
the  uses  to  which  such  analyses  are  put.  There  is  no  attempt  to  define 
the  "right"  way  to  perform  a risk  analysis  since  no  two  ranges  have  the 
same  factors  that  must  be  considered.  The  main  objective  is  to  provide 
under  one  cover  a description  of  the  methods  used  at  each  range  so  that 
other  ranges  can  benefit  from  the  methods  that  currently  exist.  Section 
2.0  of  this  document  contains  a discussion  of  the  broad  aspects  of  risk 
analysis  prcceaures  and  how  the  results  can  be  utilized.  Section  3.0 
deals  with  the  general  methodology  employed  to  quantify  casualty  expecta- 
tion. Lastly,  section  4.0  contains  inputs  from  each  participating  range 
describing  specific  analytical  methods  for  determining  risk  values  and 
the  use  made  of  the  results. 
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2.0  DISCUSSION 


2.1  GENERAL 

The  safety  evaluation  effort  performed  for  program  planning  or  support 
of  a specific  test  consists  of  several  factors,  one  of  which  is  risk 
analysis.  An  important  factor  in  the  risk  assessment  effort  is  early 
definition  by  the  user  of  the  program  or  test  to  be  conducted.  Knowing 
the  program  concept  and  objectives  provides  the  range  with  immediate  in- 
sight into  the  hazards  involved.  Judgments  can  then  be  made  concerning 
the  requirements  for  and  the  sophistication  of  any  necessary  risk  analysis. 
Risk  analysis  techniques  vary  considerably  from  complex  computer  program 
models  to  simplified  calculations  made  on  a hand  calculator.  Regardless 
of  the  method,  the  function  of  risk  analysis  is  to  quantitatively  identify 
the  program  or  test  risk  values. 

Risk  values  are  generally  categorized  in  two  ways:  (1)  the  probability 
of  impact  and  (2)  casualty  estimation.  The  probability  of  impact  gener- 
ally used  is  the  probability  of  at  least  one  object  impact  in  a specific 
area.  The  casualty  estimation  generally  used  is  one  of  two  types:  (1) 
the  expected  number  of  casualties,  defined  as  the  number  of  persons 
expected  to  sustain  an  injury  as  a result  of  at  least  one  object  impact 
in  a specific  area;  or  (2)  the  probability  of  casualty,  defined  as  the 
probability  of  one  or  more  persons  sustaining  an  injury.  In  many  cases 
these  two  casualty  parameters  are  approximately  equal.  Although  there 
are  variations  from  range  to  range,  these  are  the  basic  values  which  can 
be  used  to  quantify  risk. 

The  result  of  a risk  analysis  is  not  an  end  in  itself  but  rather  a means 
to  accomplish  other  goals.  Simple  identification  of  risk  values  provides 
insight  to  the  overall  acceptability  of  the  program.  If  the  risk  appears 
unacceptably  high,  the  analysis  can  provide  information  needed  for  re- 
duction of  risks  since,  during  the  identification  of  all  input  vari- 
ables, one  dominant  factor  may  be  identified  that  can  be  controlled. 

Risk  analyses  can  provide  range  management  with  pertinent  decision- 
making  information.  In  addition,  during  test  countdown,  risk  infor- 
mation can  indicate  the  acceptability  of  continuing  the  test  if  un- 
expected events  occur. 

2.2  UTILIZATION  OF  RESULTS 

Risk  analyses  are  performed  for  many  diversified  reasons;  each  test 
range  having  its  own  motivations.  The  end  product  is  valid  only  to  the 
degree  of  the  reliability  of  inputs  and  applicability  to  a given  test  or 
test  range.  Because  each  test  range  has  unique  applications,  a valid 
result  for  one  test  range  may  be  relatively  meaningless  for  another 
range. 


In  all  instances  the  risk  analysis  results  must  never  be  assumed  abso- 
lutely accurate,  since  the  results  generally  reflect  a number  of  uncertain 
assumptions.  For  this  reason  it  should  be  understood  that  risk  studies 
are  merely  tools/aids  used  in  conjunction  with  other  factors  in  the 
decision  making  process  (experience,  precedent,  known  factors  not  in- 
cluded in  study,  national  interests,  etc.).  Acceptable  risk  levels  are 
not  in  general  established.  Risks  are  minimized  to  the  extent  feasible 
and  then,  based  upon  considerations  of  test  objectives  and  national 
interests,  the  tests  are  performed  or  rejected. 

The  following  is  a list  of  general  uses  and  applications  of  risk  an- 
alysis results: 

1.  A tool  used  in  the  total  decision-making  process. 

2.  Excessive  risk  may  reveal  the  need  for  a Flight  Termination 
System  (FTS)  or  other  program  restrictions. 

3.  Results  may  indicate  the  requirement  that  an  existing  or  pre- 
designed FTS  be  redesigned,  if  such  a redesign  can  significantly  reduce 
excessive  risks. 

4.  Results  can  Indicate  the  need  for  evacuation  of  personnel, 
roadblocks,  restricted  airspace,  movement  of  critical  equipment,  call- 
up/purchase of  additional  real  estate  or  justification  for  currently 
controlled  land. 

5.  Results  might  show  the  necessity  to  modify  the  support  plans  of 
other  range  support  elements  permitted  within  the  evacuated  test  area, 
i.e.,  manned  optical  tracking  sites. 

6.  Results  might  reveal  the  need  and  advantage  of  providing  pos- 
itive protection  for  nonevacuated  personnel  (shelters,  barricades, 
bunkers,  blockhouses,  etc.)  and  critical  test  equipment  required  In  the 
evacuated  test  area. 

7.  Results  can  be  used  in  the  development  of  missile  flight  safety 
operational  support  plans  to  include  procedures,  destruct  criteria,  and 
single  piece  versus  destruct  case  (many  pieces)  impact  decisions. 

8.  Results  can  be  used  to  alert  management  to  excessive  risks  when 
indicated  for  given  tests  or  total  test  programs.  It  is  then  the  de- 
cision of  management  on  which  course  to  proceed. 

9.  Results  might  identify  test  scenarios  and  patterns  that  require 
redesign/modification  or  allow  the  selection  of  less  hazardous  scenarios 
when  options  exist. 
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10.  Results  may  Indicate  the  need  to  construct  new  facilities  in 
cases  where  It  Is  not  acceptable  to  utilize  existing  facilities. 

11.  Results  can  be  used  in  establishing  and  fabricating  limiting 
criteria  which  may  be  used  both  quantitatively  and  qualitatively. 

Single  tests  or  cumulative  test  programs  can  be  compared  in  this  manner. 

12.  Risk  studies  can  provide  documented  evidence  that  hazards  were 
considered  in  developing  test  operations  plans. 

13.  "Risks  to  test"  results  Identifying  the  reliability  of  the 
support  test  range  can  be  used  for  the  following  purposes: 

a.  Identiflng  high  risk  from  range  support  elements  and 
therefore,  assisting  In  Increasing  total  reliability  and  reducing 
hazards  Involved  In  testing. 

b.  Increasing  test  range  supportabllity. 

c.  Increasing  test  range  attractiveness  to  potential  users. 

All  the  above  considerations  can  result  in  significant  cost  savings  when 
employed  to  Identify  and  reduce  risks. 
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3.0  THE  ESSENTIALS  OF  CASUALTY  EXPECTATION 


3.1  CALCULATIONS  ASSOCIATED  WITH  TESTING 


There  are  two  aspects  to  the  problem  of  assessment  of  risks.  The  first 
is  the  quantification  of  the  risk  and  the  second  is  the  interpretation 
of  the  question,  "how  safe  is  safe  enough?"  Many  papers  addressing  both 
of  these  aspects  are  available.  This  report  addresses  only  the  first 
aspect  and  in  particular  a general  methodology  that  can  be  used  to  cal- 
culate quantitative  measures  of  risk  associated  with  range  activities. 


The  measure  most  frequently  employed  to  quantify  the  risk  associated 
with  the  testing  of  a system  is  called  casualty  expectation,  Ec.  This 
measure  is  the  number  of  persons  expected  to  be  killed  or  injured  if  a 
system  is  tested  according  to  a specified  plan.  The  specific  approach 
toward  computation  of  casualty  expectation  is  adapted  by  the  national 
ranges  to  fit  their  specific  problems  and  test  situations.  In  general, 
Ec  is  obtained  by  considering  the  following  quantities: 


• The  area  A in  which  debris  impacts  can  occur  partitioned  into  A^ 
subsets  of  areas. 


• The  fragment  impact  probability  density  (Pj)  conditioned  by  a 
given  system  failure  on  Aj. 


I The  hazard  area  A|^  associated  with  an  impact  on  A^ 


• N*,  the  number  of  people  in  A.-  subjected  to  the  hazard  encompassed 

by«H1. 


These  quantities  are  then  used  in  an  equation,  of  tho  form 


EC  = P 


i a r 1 


The  Ec  estimate  of  risk  for  a given  test  is  often  calculated  by  rumming 
the  risk  over  the  hazarded  area  for  the  test  with  each  element  of  the 
sum  weighted  according  to  the  probability  of  the  failure. 


Actual  risk  assessment  programs  developed  by  the  various  ranges  utilizing 
the  above  factors  are  described  in  section  4.0  of  this  document  to 
provide  an  assortment  of  methods,  applications  and  uses.  A generalized 
methodology  that  satisfies  all  possible  analytical  problems  does  not 
exist.  Historically  the  ranges  have  developed  risk  studies  and  analyzes, 
as  appropriate,  in  response  to  specific  tests,  weapons  systems  or  range 
operations  problems.  Although  little  standardization  exists  between  the 
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ranges  regarding  methodology,  computer  programs  and  analytical  tools;  J 

the  major  elements  of  a risk  analysis  do  recur.  A typical  risk  analysis 
requires  five  basic  categories  of  data: 

• Weapon/system  failure  modes  and  probabilities. 

I Impact  probabilities  and  distributions  resulting  from  failures 
or  normal  tests. 

• A measure  of  lethality  of  impacting  debris. 

• Location  and  nature  of  population  and  structures  hazarded  by  the 
test/mission. 


m 
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• Test  plans. 

Various  elements  of  these  categories  may  be  considered  in  development  of 
a risk  analysis  for  a proposed  system  test.  The  following  subparagraph 
discusses  and  lists  typical  elements  that  occur  in  risk  analysis  studies. 

3.1.1  System 

Test  vehicle  physical  data  utilized  may  include: 

Fragmentation  characteristics 

Mass 

Shape 

Ballistic  coefficients 
Flight  dynamics 
Propellants 

Flight  Termination  System  (FTS) 

Expl os i ve/ f ue 1 /chemi cal  properti es 
Guidance  and  control 

Stage  burn  times  and  separation  characteristics 
Fragmentation/lethal i ty 

Flight  control  and  termination  system  properties 


w. 


t 
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The  failure  modes  and  associated  probability  of  failure  are  required  if 
other  than  a normal  test  is  addressed.  Estimates  for  probabilities  of 
failure  mode  occurrence  are  typically  based  upon  knowledge  of  the  vehicle's 
critical  systems  and  expert  assessment  of  their  reliability  combined 
with  historical  data  when  available. 

3.1.2  Impact  Probabilities 

The  regions  or  test  areas  subjected  to  a hazard  must  be  identified.  The 
regions  may  be  subdivided  into  smaller  sections,  critical  locations  of 
people,  or  buildings  that  are  specified  for  subsequent  risk  calculations. 
All  risk  analyses  require  estimates  of  the  probabilities  of  debris/ 
fragments  from  a failed  vehicle  impacting  within  hazardous  distances  of 
personnel  or  structures  in  the  test  region. 

The  design  and  engineering  associated  with  the  development  of  a system 
is  geared  to  producing  a properly  functioning  vehicle.  As  a consequence, 
there  are  generally  no  data  defining  vehicle  performance  characteristics 
after  a critical  failure  has  occurred.  These  data  are,  however,  required 
for  risk  assessment.  To  provide  these  data,  computer  models  have  been 
developed  to  simulate  vehicle  responses  after  a given  gross  failure  mode 
has  occurred.  These  computer  models  may  be  used  as  part  of  the  computa- 
tional process  for  generating  impact  probabilities  and  definitions  for 
the  so-called  debris  impact  probability  density  functions.  These  models 
combine,  statistically  and  dynamically,  well  defined  vehicle  data  with 
expert  engineering  estimates  to  predict  vehicle  performance  after  a 
failure  occurs. 

3.1.3  Debris  Lethality 

An  important  aspect  of  the  vehicle  data  problem  that  must  be  addressed 
prior  to  performing  risk  calculations  is  the  delineation  of  what  occurs 
after  vehicle  impact.  This  ultimately  will  define  the  hazard  area  for  a 
given  vehicle  or  fragment  impact.  The  data  items  which  are  often 
developed  for  this  part  of  the  problem  include:  an  impact  energy  dis- 
tribution budget,  explosive  energies  available  (if  any)  at  impact, 
secondary  fragments  which  may  result  from  impact,  and  ricochet  proba- 
bilities and  characteristics.  Items  such  as  these  are  used  to  calculate 
hazard  areas  for  the  various  hazard  mechanisms. 

3.1.4  Population/Structures  Data 

The  major  purpose  of  risk  analysis  is  to  determine  the  magnitude  of 
hazards  to  personnel  and  structures  posed  by  a test  and/or  total  test 
program.  Locations  of  buildings  and  structures  and  the  distribution  of 
populations  throughout  the  test  areas  must  be  known.  Other  elements 
commonly  addressed  are: 
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3.1.5  Test  Planning 
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constraints  posed  by  the  following  9 th*  a"alys1s  are  the  test 
Test  areas/range  geometry 
Targeting  optics 

Nominal  flight  trajectories/profiles 
Launch/release  points 
Destruct  and  impact  limit  lines 
TTS  criteria 

Wind/weather  restrictions 

Warhead  arming,  fusing,  detonation  requirements 
Instrumentation 

Essential  support/personnel  requirements 
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4.0  INDIVIDUAL  RANGE  RISK  ANALYSIS  TECHNIQUES 

4.1  ARMAMENT  DEVELOPMENT  AND  TEST  CENTER  (ADTC)  RISK  ASSESSMENT 
METHODOLOGY  - A DETAILED  OVERVIEW 

4.1.1  Introduction 

The  risk  assessment  methodology  at  ADTC  for  air-to-ground  weapons  con- 
sists of  three  integrated  computer  programs  and  their  related  data 
bases.  This  section  provides  an  overview  of  the  three  programs,  inter- 
program data  flows,  related  data  requirements  and  computed  outputs,  and 
a discussion  of  the  mathematics  of  risk  assessment.  Included  also  is  a 
discussion  of  the  basic  assumptions  and  limitations  which  were  imposed 
during  the  development  of  the  program. 

4.1. i.2  Risk  Assessment  Programs  and  Data  Bases 

As  previously  mentioned,  the  ADTC  risk  assessment  methodology  is  em- 
bodied in  three  computer  programs  and  their  associated  data  bases. 

These  programs  have  been  structured  and  integrated  together  to  enable 
the  range  safety  analyst  to  use  the  best  data  available  for  a given 
weapon  system,  and  test  to  estimate  the  associated  risks.  Since  en- 
gineering design,  performance  and  reliability  data  of  the  type  required 
for  risk  assessment  are  often  unavailable  at  the  time  risk  assessments 
must  be  made,  a portion  of  the  computational  methodology  is  designed  to 
enable  the  range  safety  analyst  to  estimate  these  required  data  prior  to 
the  calculation  of  the  measures  of  risk.  Should  these  data  be  available 
from  other  sources,  the  computational  methodology  has  provisions  for 
their  usage. 

The  three  computer  programs  which  together  comprise  the  computational 
portion  of  the  ADTC  risk  assessment  methodology  are  called  PTRAJ,  DENGEN 
and  RISK.  The  relationship  between  these  programs,  the  interprogram 
data  flows  and  their  associated  data  bases  are  shown  in  Figure  4-1  -1  and 
Figure  4-1-2. 

Program  PTRAJ  is  a 3-degree  of  freedom  (3-DOF)  trajectory  generation 
program.  It  provides  a means  for  simulating  the  performance  of  thrusting, 
maneuvering  and  guiding  air-launched  vehicles.  Its  function  in  the  risk 
assessment  methodology  is  to  provide  a means  for  generating  nominal  test 
flight  profiles  and  for  adjusting  the  actual  or  estimated  aerodynamic 
data,  thrust  profiles  and  guidance  constants  for  a given  vehicle  to 
enable  the  3-DOF  simulation  to  closely  match  the  predicted  performance 
profiles  generated  by  more  detailed  6-D0F  simulations.  The  primary 
outputs  of  Program  PTRAJ  are  the  adjusted  vehicle  specification  data  and 
nominal  test  trajectories.  A report  entitled  “A  Guided  Vehicle  Impact 
Predictor  for  Use  in  Statistical  Models"1  describes  the  computational 
aetails,  the  input/output  (I/O)  and  the  user  instructions  for  Program 
PTRAJ.  Subparagraph  4.1,3  to  this  section  provides  an  overview  of 
Program  PTRAJ. 
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Program  DENGEN  Is  a Monte  Carlo  program  which  calculates  the  debris 
Impact  probability  density  functions  {PDFs)  associated  with  a failed 
vehicle.  The  computational  core  of  Program  DENGEN  is  the  impact  pre- 
dictor portion  of  Program  PTRAJ.  The  guidance  models  of  Program  PTRAJ 
are  supplemented  by  guidance  failure  mode  effect  models,  and  the  pro- 
pulsion model  is  supplemented  with  a thrust  failure  mode  effect  model. 
The  program  uses  Monte  Carlo  sampling  techniques  to  derive  bivariate 
tabular  descriptions  and  the  associated  statistics  for  the  debris  impact 
PDF.  The  derived  PDFs  include  the  effects,  when  appropriate.  Imposed  by 
the  use  of  flight  termination  systems  (FTS)  and  the  resulting  types  of 
debris.  Program  DENGEN  also  makes  use  of  computational  techniques  to 
estimate  the  sufficiency  of  the  Monte  Carlo  sample  sizes  and  multi- 
variate nonlinear  regression  techniques  to  improve  the  quality  of  the 
PDF  representations. 


The  report  entitled  "Program  for  Generating  Debris  Impact  Probability 
Density  Functions  (Program  DENGEN)"2  describes  the  computational  de- 
tails, the  program  I/O  and  the  user  instructions  for  Program  DENGEN. 
The  report  entitled  "Impact  Probability  Density  Function  Enhancement"3 
describes  the  computational  details  for  determining  sample  size  suffi- 
ciency and  the  multivariate  regression  techniques  employed. 


Program  RISK  is  the  program  which  actually  calculates  the  measures  of 
risk  associated  with  a specific  weapon  test.  This  program  requires  the 
output  of  both  Programs  PTRAJ  and  DENGEN  or  comparable  data  from  other 
sources.  Program  RISK  is  particularized  to  ADTC.  The  program  uses  both 
built-in  and  external  data  bases  which  are  dependent  upon  geometry, 
coordinate  systems  and  geographical,  geophysical  and  statistical  data 
which  have  appliction  only  to  ADTC  and  its  immediate  environs.  The 
computational  algorithms  contained  in  Program  RISK  are  ADTC  particulari- 
zations of  computational  algorithms  which  were  evolved  over  a long 
period  of  time  and  which  have  a history  of  application  at  other  national 
test  ranges. 


The  report  "Risk  Assessment  Program  - Phase  II"4  describes  the  com- 
putational details,  program  I/O,  available  options,  and  user  instruc- 
tions for  Program  RISK.  The  report  "Population  Library  Update  II"5 
describes  the  data  base  containing  population  related  data  for  ADTC  and 
its  environs.  Numerous  other  source  documents  (references  6 through  9) 
describe  other  data  items  and  data  sets  particular  to  ADTC  and  which  are 
built  into  Program  RISK. 


A portion  of  the  ADTC  risk  assessment  methodology  which  is  still  evolv- 
ing is  the  data  bases  comprised  of  the  outputs  of  Program  PTRAJ"  and 
DENGEN.  These  data  which  consist  of  vehicle  descriptions,  failure 
modes,  PDFs,  etc.,  are  for  specific  weapon  types  and  tests,  and  are 
valuable  for  estimating  performances  of  future  or  hypothetical  weapon 
types  and  tests  for  which  there  currently  exist  little  or  no  useable 
data. 
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4.1.2  The  Mathematics  of  Risk  Assessment  at  ADTC 

4. 1.2.1  A Definition  of  Risk 


& 


?•. 


The  risk  associated  with  the  conduct  of  a specific  weapon  test  is  of  a 
probabilistic  nature.  It  is  measured  by  calculating  the  statistical 
estimate  of  the  number  of  Injuries  expected  to  occur  as  a result  of  the 
test.  This  measure  is  called  the  casualty  expectation  and  is  denoted  by 
Ec.  It  is  Important  to  note  that  for  range  safety  purposes,  an  Injury 
is  considered  to  be  any  type  of  bodily  harm  and  this  includes,  of  course, 
fatalities. 
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The  primary  phenomena  associated  with  inert  weapon  tests  which  can  cause 
bodily  harm  are  overpressure  and  flying  debris.  Other  factors  are 
Important  but  can  be  considered  as  contributors  to  one  or  both  of  the 
basic  phenomena.  The  phenomena  associated  with  live  weapon  tests  include, 
additionally,  fire  and  secondary  debris.  Because  the  region  hazarded  by 
fire  is  generally  less  than  that  for  either  overpressure  or  flying 
debris,  the  measure  of  risk,  i.e.»  casualty  expectation,  can  be  defined 
as  the  number  of  injuries  expected  to  occur  as  a result  of  exposure  to 
overpressures  greater  than  2 psi 1 0 or  of  being  struck  by  flying  debris  - 
primary  or  secondary  - with  impact  energies  greater  than  33.3  ft-lbs.10 

4. 1.2. 2  The  Calculation  of  £c 

4. 1.2. 2.1  Data  Bases  for  Ec  Calculations 

There  are  numerous  data  Items  necessary  to  support  the  Ec  analysis  which 
are  not  test  dependent  and  for  which  values  have  been  compiled  and 
stored  in  data  bases  for  use  from  test  to  test.  Some  of  these  data 
require  periodic  updating  and  some  are  nominal  values.  Whenever  data 
other  than  the  nominal  are  required,  they  must  be  explicitly  provided  by 
the  user.  These  data  and  their  relationship  to  the  risk  assessment 
programs  are  shown  in  Figure  4-1-2. 

4. 1.2. 2. 1.1  Environmental  Data  Base 

The  environmental  data  base  consists  of  values  selected  from  the  1969 
Air  Research  Development  Command  (ARDC)  Standard  Atmosphere  and  supple- 
mented with  the  90  percent  wind  data  for  ADTC  (see  references  8 and  9). 
These  data  are  required  by  the  impact  predictor  portions  of  Programs 
PTRAJ,  DENGEN  and  RISK. 


4. 1,2. 2. 1.2  Geophysical  Data  Base 

The  geophysical  data  base  consists  of  the  earth  physical  and  geopo- 
tential constants  for  the  1866  Clarke  Ellipsoid  and  1927  National 
Academy  of  Science  (NAS)  Datum  (see  reference  9).  These  data  fit  ADTC 
and  its  environs  very  well  and  are  required  by  the  Impact  predictor 
portions  of  Programs  PTRAJ,  DENGEN  and  RISK. 
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4. 1.2. 2. 1.3  Geographical  Oata  Base 

The  geographical  data  base  consists  of  several  sets  of  coordinate  data. 
These  data  sets  correspond  to  points  along  the  boundaries  of  the  AOTC 
land  reservation,  several  of  the  major  ADTC  test  areas  and  the  north 
Florida  coastline.  These  data  are  used  in  Program  RISK  for  drawing  maps 
which  show  the  population  regions  of  major  concern.  Contained  in  this 
data  set  are  also  the  geodetic  locations  of  the  earth  fixed  reference 
coordinate  system  origins. 

4. 1.2. 2. 1.4  Population  Data  Base 

The  population  data  base  contains  the  location  names  and  sizes,  number 
of  people  present,  and  the  amount  of  sheltering  afforded  the  population 
for  all  known  population  areas  on  and  within  the  vicinity  of  ADTC.  The 
geographical  region  covered  by  this  data  base  extends  from  Mexico  Beach, 
Florida,  westward  to  Mobile,  Alabama,  and  from  about  200  nautical  miles 
offshore  northward  to  the  Alabama  state  line.  This  data  base  is  up.  .ted 
periodically  and  is  documented  In  reference  5. 

4. 1.2. 2. 2 Calculation  Overview 
c 

Superficially,  the  calculation  of  E appears  to  be  a straightforward 
process.  This  is,  however,  not  theccase.  The  problems  encountered  by 
the  range  safety  analyst  are  virtually  the  opposite  of  those  encountered 
by  the  weapon  system  design  and  test  engineers.  During  the  RDT&E  phases 
of  weapon  system  development,  the  problems  are  centered  around  the 
performance  optimization  for  a properly  working  weapon  system.  Such 
problems  are  generally  well  defined  and  bounded  in  scope.  Further, 
there  exists  a wealth  of  technology  and  applicable  historical  data  for 
addressing  these  problems.  In  contrast,  the  range  safety  analyst  is 
concerned  with  the  understanding  and  prediction  of  the  behavior  of 
weapon  systems  after  they  have  malfunctioned  In  any  of  a variety  of 
failure  modes.  These  failure  mode  processes  are  inherently  poorly 
defined,  probabilistic  in  nature  and  subject  to  considerable  uncertainty. 
Further,  there  seldom  exists  during  the  analysis  performance  period  any 
substantial  data  of  the  type  required  to  support  a detailed  risk  analysis 

These  problems  are  formidable.  The  data  voids  have  been  filled  through 
the  utilization  of  predictive  methodologies  developed  by  coupling 
specialized  rangte  safety  technology  with  existing  broadbased  RDT&E 
technology.  It  Is  Important  to  note  that  it  Is  imperative  to  the  E 
calculation  process  that  the  gross  behavior  of  a failed  weapon  system  be 
predictable. 

The  actual  calculations  for  the  total  Ec  for  a given  weapon  test  proceed 
in  a stepwise  manner  yielding  In  the  process  numerous  calculated  quan- 
tities of  Interest  to  the  range  safety  analyst.  Depending  upon  the 
quantity  and  quality  of  data  available  to  the  range  safety  analyst  at 
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the  time  the  analysis  is  begun,  the  computational  process  shown  in 
Figure  4-1-1  may  be  entered  at  any  one  of  three  points.  Ultimately,  the 
computational  process  will  require  consideration  in  turn  of  each  of  the 
weapon  system's  failure  modes,  their  probability  of  occurrence,  the  type 
and  hazard  potential  of  the  resulting  debris,  where  the  debris  impacts, 
and  the  effect  upon  the  population  in  the  region  influenced  by  the  test. 

In  the  ADTC  risk  assessment  programs,  a separate  casualty  expectation  Is 
calculated  for  each  of  the  populated  areas  affected  by  each  type  of 
debris  resulting  from  each  of  the  vehicle  failure  modes.  These  individual 
Ec's  ^re  then  accumulated  in  accordance  with  the  algebra  for  conditional 
probabilities  to  yield  an  estimate  for  the  total  Ec  for  the  weapon  test. 

If  an  Ec  estimate  Is  required  for  an  ill-defined  or  hypothetical  weapon, 
the  range  safety  analyst  would  first  exercise  Program  PTRAJ  to  establish 
a useable  dynamical  description  for  the  vehicle  and  to  develop  a set  of 
nominal  flight  trajectories  for  the  proposed  test.  If  the  vehicle  Is 
well  defined  and  nominal  trajectories  are  available,  these  available 
data  may  be  used  in  lieu  of  exercising  Program  PTRAJ. 

Secondly,  an  analysis  must  be  performed  to  establish  failure  related 
data  for  the  vehicle.  The  gross  failure  modes  and  their  effects  must  be 
identified  and  their  probability  of  occurrence  established.  If  an  FTS 
is  deemed  necessary,  a vehicle  breakup  description  should  be  developed. 

The  determination  of  vehicle  failure  modes  and  their  probability  of 
occurrence  are  among  the  most  difficult  factors  to  establish  in  the  Ec 
analysis.  Currently,  estimates  based  upon  historical  data  for  related 
systems  and  vendor  supplied,  analysis  are  considered  to  be  the  most 
reliable  sources  for  these  types  of  data. 

Given  the  failure  mode  and  effects  data  along  with  a dynamical  descrip- 
tion of  the  vehicle  and  a nominal  test  trajectory,  the  PDFs  for  the 
debris  Impact  points  can  be  derived.  The  debris  impact  PDFs  are  essen- 
tial to  the  Ec  calculations.  Along  with  the  failure  mode  probabilities 
of  occurrence,  the  determination  of  the  debris  impact  PDFs  pose  the  most 
difficult  computational  requirements  in  the  entire  risk  assessment 
process,  and  they  are  the  sources  of  considerable  uncertainty  In  the  Ec 
calculations.  An  entire  block  of  the  ADTC  risk  assessment  methodology, 
i.e..  Program  DENGEN,  is  devoted  to  the  development  of  the  required  PDFs 
and  to  the  reduction  of  the  uncertainty  in  this  segment  of  the  Ec 
calculations.  Again,  should  these  data  be  available  from  a previous 
analysis  or  from  the  weapon  system  vendor,  the  use  of  Program  DENGEN  can 
be  bypassed. 

When  the  above  described  data  are  established,  the  actual  Ec  calcu- 
lations can  be  performed.  (The  computational  flow  for  this  segment  of 
the  calculations  Is  shown  in  Figure  4-1-8.)  These  calculations  are  all 
carried  out  In  Program  RISK  along  with  various  bookkeeping  and  data 
management  calculations  typical  of  large  scale  computer  programs. 
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The  components  of  the  equation  for  Ec  are:  (1)  the  probability  of 
hitting  a populated  area,  (2)  the  probability  of  subjecting  the  people 
In  the  populated  area  to  a hazard  from  either  flying  debris  or  from 
hazardous  overpressures,  and  (3)  the  number  of  people  subjected  to  the 
hazard.  The  probability  of  hitting  a populated  area  and  the  probability 
of  the  people  in  the  area  being  subjected  to  a hazard  are  in  general 
different.  This  is  because  in  many  instances  a portion  of  the  popula- 
tion is  protected  to  some  degree  by  sheltering.  The  extent  of  the 
hazard  is  evaluated  through  a modeling  o^  the  impact  process  and  the 
resulting  secondary  effects.  These  calculations  allocate  portions  of 
the  debris  impact  kinetic  energy  and  energy  available  from  unspent  fuel 
or  explosive  detonations  to  secondary  processes  such  as  structural 
penetration  by  fragments,  production  of  hazardous  overpressures,  and  the 
production  of  secondary  debris.  The  occurrence  of  debris  impact  can, 
but  may  not  necessarily,  result  in  all  of  these  hazardous  processes. 
Further,  for  a given  failure  mode,  different  types  and  quantities  of 
debris  are  generated  each  of  which  can  produce  different  hazardous 
effects  uoon  impact.  Since  some  of  the  people  in  the  populated  areas 
are  afforded  varying  degrees  of  shelter,  the  hazardous  effects  produced 
by  debris  impact  must  be  matched  against  the  sheltering  to  determine  the 
actual  number  of  people  hazarded. 

This  matching  process  yields  a probabilty  of  hazard  which  is  a function 
of  the  hit  probability,  the  hazardous  effects  produced  upon  or  immedi- 
ately after  impact,  the  type  of  shelter  available  to  the  people  in  the 
affected  area,  and  tK.  ability  of  the  available  shelter  to  mitigate  the 
hazardous  effects. 

At  ADTC,  the  population  data  are  divided  into  three  classes,  and  for 
efficiency,  separate  algorithms  have  been  developed  to  calculate  the 
hazard  probabilities  and  Ec  for  each  data  class.  The  population  con- 
centrations located  in  the  vicinity  of  ADTC  are  tabulated  relative  to  a 
fixed  grid  system.  The  finest  subdivision  of  this  grid  is  a rectangular 
area  with  dimensions  of  ^minute  by  *5  minute.  The  population  in  this 
area  is  assumed  to  be  uniformly  distributed  and  afforded  no  shelter. 

The  population  located  on  ADTC  is  assumed  to  be  concentrated  in  the 
various  buildings  which  are  in  turn  located  at  various  places  on  the 
ADTC  land  reservation.  The  population  concentrations  In  these  buildings 
are  afforded  varying  degrees  of  shelter  ranging  from  no  shelter  to  the 
equivalent  of  four  inches  of  reinforced  concrete.  Lastly,  there  are 
certain  parts  of  the  ADTC  land  reservation  which  are  open  to  public 
usage  for  hunting,  fishing,  hiking,  etc.  In  these  areas  the  population 
is  assumed  to  be  uniformly  distributed,  afforded  no  shelter,  and  the 
density  dependent  upon  the  season.  This  population  is  referred  to  as 
the  residual  population. 

For  the  population  located  in  the  % minute  by  }$  minute  regions,  the  hit 
probability  is  determined  by  integrating  the  impact  PDF  function  for  each 
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specific  debris  type  over  the  area.  Thus,  for  the  ith^  area,  jth  failure 
mode  and  kth  debris  type,  the  hit  probability  is  given  by 


/ fik(A)dA, 
Ai  JK 


where 


fjk  (A)  is  the  debris  impact  PDF  for  the  jth  failure 
mode  and  kth  debris  type, 

A.  is  the  ith^  populated  area. 

The  hazard  probability  is  then  calculated  from 


P12 

kHAZ 


ijk 


= p«ijkAH2 


/A, 


(2) 


where 


AH2  is  the  hazard  area  associated  with  a 2 psi  overpressure 
and  any  secondary  debris  generated  at  impact. 

The  probability  of  hazard  to  the  residual  population  is  calculated  in 
the  same  fashion  except  that  the  integration  is  carried  out  over  the 
area  containing  the  residual  population. 


For  the  population  located  within  a specific  building,  the  hazard  proba- 
bility is  broken  into  four  separate  and  mutually  exclusive  parts  to 
account  for  the  mitigation  of  the  hazardous  effects  by  the  available 
shelter.  In  this  instance  both  impacts  on  and  in  the  near  vicinity  of 
the  building  are  accounted  for  in  terms  of  their  generated  overpressures 
and  primary  debris  penetration  capability.  The  four  hazard  probabilities 
are  obtained  by  integrating  the  distribution  of  impact  points  over  the 
areas  within  and  around  the  buildings  that  are  affected  by  each  of  the 
hazardous  processes.  Thus, 


\ 

i 


.»«  =/  fik(A)dA  , N=  1,  2,  3,  4 

HAZijk  ieAN  j 

where 

An  refers  to  the  area  affected  by  the  Nth  (N  = 1,  2,  3,  4) 
n hazardous  process. 


\ 


(3) 
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N*1  Area  A^  Is  contained  completely  within  An.  The  2 psl  over- 
pressure applies  to  all  populations  Identified  by  the  debris 
penetration  flags, 

*2  Area  A2  contained  partially  within  A^.  The  2 psl  overpressure 
applies  to  all  population  identified  by  the  debris  penetration 
flags, 

=3  Impacts  occur  exterior  to  building  perimeter  but  2 psi 
overpressure  applies  to  that  fraction  of  population  con- 
tained In  A3  which  Is  unsheltered, 

=4  impacts  occur  exterior  to  building  perimeter.  The  30  psl 
overpressure  applies  to  that  fraction  of  population  con- 
tained In  A4  which  is  sheltered  bv  less  than  four  Inches  of 
reinforced  concrete. 

Once  the  probability  of  hazard  from  the  primary  debris  impact  has  been 
determined,  the  casualty  expectation  can  be  calculated.  Thus,  the  Ec 
for  the  1th  populated  area  due  to  the  kth  debris  type  generated  as  a 
result  of  the  occurrence  of  the  jth  failure  mode  can  be  written  as 


:Cljk  ' <PHAZljk  + "Mzijk*  L,  Nlk  spc\ 
tPH«1jk  <NPC2  * NPC3>  * ^/pc,  • 


where 


number  of  people  In  the  1th  building  protected  by  the 
tth  level  of  sheltering, 


^pc^  * Penetration  flag  denoting  whether  or  not  the  jkt]i  debris 
type  can  penetrate  the  *th  shelter  level. 

For  both  the  residual  population  areas  and  the  population  areas  In  the 
vicinity  of  the  ADTC  land  reservation, 


p22  x p32  a p42  a 

HAZ1jk  HAZijk  HAZ1jk 
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To  calculate  the  total  Ec  for  a given  test,  the  Ec's  for  each  debris 
type  and  failure  mode  must  be  accumulated.  This  process  requires  esti- 
mates for  the  probabilities  of  occurrence  for  each  failure  mode  and  FTS 
generated  debris  type.  Program  0EN6EN  calculates  estimates  for  the 
probability  of  occurrrence  for  each  debris  type  given  the  occurrrence  of 
a specific  failure  mode.  These  debris  types  are:  (1)  the  Intact  vehicle, 
which  assumes  that  either  the  FTS  was  not  employed  or  it  failed;  and  (2) 
up  to  three  categories  of  fragments  which  differ  In  weight  and/or  ballistic 
coefficient.  The  fragment  occurrence  probabilities  as  calculated  in 
DENGEN  are  denoted  by  PjV  and  Pf,  and  the  Ec  for  a given  (jth)  failure 
mode  Is  given  by 


Np 

: ■ l , 

Cj  T = 1 


(P  E + 1 (1-P  )P 

^iv  Cij  v ir  f 


E ). 
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The  ADTC  risk  assessment  program  can  handle  the  probability  of  failure 
mode  occurrence  in  any  one  of  several  ways  depending  upon  the  type  and 
availability  of  data.  First,  the  failure  probability  may  be  modeled  by 
a Welbull  or  exponential  distribution,  or  if  similar  weapon  type  his- 
torical data  are  used,  the  failure  probability  can  be  estimated  as  a 
function  of  the  current  test  number.  If  insufficient  data  are  available 
to  model  the  failure  probability  as  a function  with  reliability,  mean- 
time-between-failure  (M-T-B-F),  or  current  test  number  as  the  independent 
variable,  historical  data  may  be  used  to  estimate  the  failure  probability 
as  a single  number.  In  any  case,  the  end  result  Is  an  estimate  of  the 
probability  that  a given  failure  mode  occurs,  and  this  number  is  denoted 
by  Ppalli*  The  conditional  probability  that  the  jth  failure  mode  occurs 
and  not  the  others  Is  given  by 


(7) 


where 

CPFa111  = PFail1 

The  total  Ec  for  the  test  due  to  all  failure  modes  is  given  by 


"FM 

l CP 
j=i 


Fail. 


(8) 
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The  set  of  casualty  expectations  denoted  by  Ec  , Ec  and  E are  the 
end  Item  outputs  of  Program  RISK.  ‘ j W 

4.1.3  Program  PTRAJ  Overview 

4. 1.3.1  P1RAJ  Background 

Program  PTRAJ  is  a modified  version  of  the  ADTC  Program  P2020.9  Program 
P2020  In  its  original  form  possessed  many  of  the  features  required  of  an 
Impact  predictor  algorithm  slated  for  use  In  a statistical  model  de- 
signed to  produce  impact  PDFs.  Although  it  did  not  have  a guidance 
model  or  a thrust  model,  the  program  structure  was  such  that  these 
features  could  be  easily  added.  Reference  1 documents  the  modifications 
to  Program  P2020  and  the  algorithms  which  were  added  to  give  it  the 
required  capabilities. 

4. 1.3. 2 Program  PTRAJ  Computational  Sequence 


Program  PTRAJ  is  a 3-DOF  trajectory  generation  program.  It  is  set  up  to 
calculate  the  trajectory  of  an  air-to-ground  thrusting,  guiding  vehicle. 
It  assumes  that  the  target  Is  stationary  and  that  the  guidance  system 
employs  a proportional  navigation  guidance  law.  The  equations  of  motion 
are  set  up  relative  to  an  earth  defined  by  the  1966  Clarke  spheroid  and 
1927  NAS  Datum.  The  aerodynamic  forces  are  evaluated  based  upon  the 
1969  ARDC  Standard  Atmosphere  and  the  90  percent  wind  table  for  ADTC. 

The  macro  flow  diagram  for  Program  PTRAJ  Is  shown  ^n  Figure  4-1-3. 

4. 1.3. 3 Program  PTRAJ  I/O 

4. 1.3. 3.1  PTRAJ  Input  Data 

The  input  data  for  Program  PTRAJ  are  broken  into  two  classes:  (1)  the 
library  data  and  (2)  the  user  supplied  data.  The  mathematical , geo- 
physical and  environmental  data  which  are  peculiar  to  ADTC  are  built, 
directly  into  the  program.  Further,  the  most  commonly  used  values  for 
the  user  supplied  data  are  also  built  directly  into  the  program. 

Having  such  library  data  built  into  the  program  greatly  simplifies  the 
data  deck  setup  and  facilitates  the  program  usage. 

The  user  furnished  data  are  supplied  to  Program  PTRAJ  in  NAMELIST  format. 
Use  of  NAMELIST  further  simplifies  the  program  usage  ar.d  aids  in  the 
elimination  of  clerical  or  bookkeeping  errors.  The  NAMELIST  data  are 
shown  in  Table  4-1-1. 

4. 1.3. 3. 2 PTRAJ  Output  Data 

The  output  from  Program  PTRAJ  is  basically  a position/velocity  time 
history  augmented  by  guidance  and  force  data.  The  guidance  and  force 
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Figure  4-1-3.  PTRAJ  Macro  Flow  Diagram 
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Table  4-1-1 
PTRAJ  Namelist  Data 

TMACH  Vector  of  mach  number  values  (up  to  10  values) 

In  the  table  lookup  for  and  C^. 

TALPHA  Vector  of  angle  of  attack  values  (up  to  10  values)  used 

In  the  table  lookup  for  and  C^. 

TABCNA  Table  of  normal  force  coefficient  values  corresponding 

to  the  values  In  TMACH  and  TALPHA  (up  to  100  values). 

TA8CA  Table  of  axial  force  coefficient  values  corresponding 

to  the  values  In  TAMCH  and  TALPHA  (up  to  100  values). 

TABTHR  Table  of  thrust  vs  time  values  (up  to  a total  of  30  values) 

NMACH  Number  of  values  In  TMACH 

NALPH  Number  of  values  In  TALPHA 

NP  Number  of  thrust  values  in  TABTHR 


NAVC0N 

ALPHAO 

BETAD 

TLAT 

TLON 

GLATLM 


*'v4 nation  constant  used  In  proportional  guidance  routine. 

Init-Ul  values  for  pitch  angle  of  attack  and  sideslip 

> » 

"a 

Latitude  and  longitude  of  target 
Lateral  acceleration  limit 


ADLIM 

BDLIM 


Limits  on  a and  & 


ALPLIM 

BETLIM 


Limits  on  a and  p 


PVHIST  Nominal  time  history  trajectory  (t,x,y,z,x,y,z) 


PHIORI 

LAMORI 

PSIORI 


Latitude,  longitude  and  azimuth  of  the  x-axis  used  in 
PVHIST,  Normally  PHIORI  and  LAMORI  will  correspond 
to  the  launch  point. 


WEATHER  Table  defining  reference  atmosphere  and  wind  to  be  used 

In  lieu  of  a standard  atmosphere. 


Table  4-1-1  (Continued) 


IWEATH 

NOWIND 

NOLIFT 

NODRAG 

NOTHRUST 

CAO 

DT 

I FLAG 

LOD 

ABETA 

BALTRJ 

T 

WEIGHT 
AREF 
I OUT 


Number  of  data  vectors  in  WEATHER  table 

• 0 Zero  out  wind  values 
3 1 Use  wind  values 

a 0 Do  not  calculate  Cu  from  table 
3 1 Calculate  C^  from  table 

3 0 Use  CAO  or  ABETA  to  calculate  C a 
3 1 Calculate  C^  from  table 

3 0 Set  thrust  to  zero 
3 1 Calculate  thrust  from  table 

User  supplied  constant  value  for  CA 

Integration  step  size 

3 0 Do  not  modify  Integration  step  size 
3 1 Halve  or  double  step  size  as  necessary 

L/D  ratio  can  be  used  Instead  of  a lift  coefficient 
table  to  calculate  lift 

Ballistic  coefficient  (not  necessary  if  CAO  or  drag  table 
Is  supplied) 

3 0 Unguided  trajectory 
3 1 Guided  trajectory 

Initial  time 

Vehicle  weight 

Aerodynamic  reference  area 

=.  0 Print  out  intermediate  data 
3 1 Suppress  all  Intermediate  output 


data  may  be  suppressed  if  desired.  Table  4-1-II  describes  the  output 
data  format  and  Table  4-1-1 1 1 shows  a sample  output  page. 

4. 1.3. 4 Program  PTRAJ  Uses 

Program  PTRAJ  is  embodied  as  an  impact  point  predictor  in  each  of  the 
programs  used  in  the  ADTC  risk  assessment  methodology.  In  Programs 
DENGEN  and  RISK  all  of  the  I/O  subroutines  were  stripped  away  and  the 
impact  point  prediction  algorithms  and  data  bases  were  incorporated 
intact.  PTRAJ  also  has  uses  as  a stand-alone  program  in  the  ADTC  risk 
assessment  methodology.  It  serves  as  a tool  to  test  the  aerodyn?nic  and 
performance  descriptions  of  advanced  weapon  systems  for  later  u^e  in 
DENGEN  and  RISK.  Additionally,  PTRAJ  serves  as  a tool  to  generate 
nominal  flight  profiles  which  are  frequently  required  in  risk  assessment 
analyses. 

4.1.4  Program  DENGEN  Overview 

4. 1.4.1  DENGEN  Background 

Program  DENGEN  calculates  debris  impact  PDFs  using  a combination  of 
Monte  Carlo  sampling,  dynamic  simulation,  failure  mode  effects  modeling 
and  multivariate  nonlinear  regression  techniques.  Program  DENGEN  was 
developed  to  fill  data  and  capability  voids  and  the  deficiencies  identi- 
fied in  references  11,  12,  and  13.  The  historical  approach  to  the 
debris  impact  PDF  problem  was  to  assume  that  the  debris  would  all  be 
contained  within  the  maximum  energy  boundary  of  the  tested  vehicle  and 
within  that  boundary  the  debris  would  be  normally  distributed.  Reference 
12  showed  by  example  that  the  debris  distributions  were  not  normally 
distributed,  and  reference  13  showed  that  the  E-  calculations  were 
affected  adversely  by  the  assumption  of  normality.  Further,  the  maximum 
energy  boundaries  associated  with  advanced  weapons  and  targets  are  so 
large  that  their  usage  would  impose  unrealistic  constraints  upon  the 
design  of  weapon  tests  and  also  Imply  a complete  lack  of  capability  to 
control  the  locus  of  debris  impacts  through  the  use  of  an  FTS. 

Program  DENGEN  simulates  the  vehicle  failure  mode  effects  and  accounts 
for  the  effects  of  FTS  usage  including  debris  types  and  geometry.  The 
resulting  debris  impact  PDFs,  because  they  are  convolved  from  numerous 
event  distributions  which  themselves  are  abnormal,  are  generally  ab- 
normal, mult4modal  and  asymmetrical. 

4. 1.4. 2 Program  DENGEN  Computational  Sequence 

The  primary  purpose  of  Program  DENGEN  is  to  provide  debris  impact  PDFs 
for  use  in  Program  RISK.  These  PDFs  are  calculated  in  DENGEN  and  stored 
on  permanent  disk  files  for  later  usage  by  Program  RISK.  Because  there 
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Table  4-1-II 


POSITION 

GUIDANCE 

FORCES 

TIME 
X,  Y,  Z 
XD,  YD,  ZD 
XDD,  YDO,  ZDD 

XMT 

ALPHA,  BETA 
LOSP,  LOSS 

ALPHAT,  BETA 

GAMMAV 

PSIV 

FA,  FB,  FAT 
FX,  FY,  FZ 
MACH 
VEL 
Q 

CN 


Explanation  of  Printout  Heading  Parameters 


TIME 


X 

XDD 

Y 

YDD 

Z 

ZDD 

XD 

XMT 

YD 

ZD 

ALPHA 

ALPHAT 

BETA 

SIGR 

LOSP 

GAMMAV 

LOSS 

PSIV 

LOSPD 

LOSYD 

FA 

FB 

FA1 

FX 

FY 

FZ 

MACH 

VEL 

Q 

CN 

CA 

LAT  ACC 

- time  from  launch  (sec) 

X,Y,Z  coordinates  of  vehicle  (ft) 

• • • 

- X,Y,Z  rectangular  components  of  vehicle  velocity  (ft/sec) 

- X,Y,Z  rectangular  components  of  vehicle  acceleration 
(ft/sec/sec) 

- missile  target  separation  distance  (ft) 

- pitch  and  sideslip  angles  of  attack  (deg) 

- pitch  and  sidesliD  plane  missile/target  line-of- 
sight  angles  (deg) 

- total  angle  cf  attack  and  effective  roll  angles  (deg) 

- flight  path  angle  (deg) 

- azimuth  of  velocity  vector  (deg) 
forces  along  the  A,  B and  A1  axes  (lbs) 

- • forces  along  the  XYZ  axes  (lbs) 

- vehicle  i.wtcb  number  (-) 

- vehicle  speed  (ft/sec) 

- dynamic  pressure  (PSF) 

- normal  force  coefficient 
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Table  4-1 -I I (Continued) 
CA  - axial  force  coefficient 

LAT  ACC  - lateral  acceleration  (g's) 
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are  generally  several  failure  modes  associated  with  a given  weapon  type, 
and  because  the  PDF  development  process  is  Iterative,  it  is  generally 
best  to  develop  PDFs  for  one  failure  mode  at  a time.  DENGEN  can  consider 
multifailure  modes  simultaneously,  but  from  a user  point  of  view  this  is 
not  recommended. 

The  macro  level  computational  flow  for  Program  DENGEN  is  shown  in  Figure 
4-1-4.  Essentially,  the  computational  sequence  involves  the  following 
steps: 

1.  Input  all  data  to  the  program  and  perform  mission-level  data 
setup. 

2.  Setup  failure  mode  particular  data. 

3.  Monte  Carlo  sampling  begins  by  selecting  a random  failure 
time  from  the  failure  time  distribution. 

4.  Determine  the  vehicle  state  vector  from  the  nominal  trajectory 
for  the  failure  time. 

5.  Determine  the  B dependent,  failure  mode  dependent  Impact 
point. 

6.  If  a destruct  line  violation  occurred,  determine  the  impact 
points  for  the  debris. 

7.  Store  the  data  for  statistical  processing. 

8.  If  more  samples  are  to  be  calculated,  return  to  step  3. 

Otherwise,  proceed. 

9.  Sort  all  data  into  bivariate  histograms  according  to  debris 
type. 

10.  Calculate  means  and  variances  as  a function  of  sample  size 
and  also  calculate  event  probabilities. 

11.  Filter  the  histogram  data  using  a bivariate  parabolic  re- 
gression scheme. 

12.  Plot  and  store  all  data. 

13.  Setup  update  files  so  process  can  be  continued  if  deemed 
necessary. 

14.  If  additional  failure  modes  are  to  be  considered,  return  to 
step  2.  Otherwise,  terminate  sequence. 
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Figure  4-1-4.  DENGEN  Macro  Flow  Diagram 
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14.1.4.3  Program  DENGEN  I/O 
4. 1.4. 3.1  DENGEN  Input  Data 

The  user  furnished  data  for  Program  DENGEN  are  supplied  to  the  program  in 
the  NAMELIST  format.  The  required  data  consist  of  any  array  of  failure 
mode  data  and  a list  of  related  data  plus  all  of  the  data  required  by 
Program  PTRAJ  (see  Table  4-1-1).  The  additional  data  required  by  DENGEN 
are  described  in  Table  4-1 - IV  and  the  contents  of  the  failure  mode  data 
array  are  shown  in  Table  4-1-V. 
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4. 1.4. 3. 2 DENGEN  Output  Data 

The  output  data  for  Program  DENGEN  consist  of  tabulated  data,  plotted 
data  and  permanent  file  data.  The  tabulated  and  plotted  data  provide 
the  range  safety  analyst  with  a hard  copy  of  the  calculated  results. 

The  permanent  file  data  are  available  for  data  set  update  and  for  use  by 
Program  RISK.  Figures  4-1-5  through  4-1-7  provide  examples  of  DENGEN 
plotted  outputs. 

4.1.5  Program  RISK  Overview 

4. 1.5.1  RISK  Background 

Program  RISK  is  the  final  element  in  the  ADTC  risk  assessment  method- 
ology as  shown  in  Figure  4-1-1.  This  program  was  developed  to  be  applica- 
ble to  the  broad  spectrum  of  air-to-ground  weapons  types  planned  for 
testing  at  ADTC  in  the  present  to  1985  time  frame. 

Because  of  factors  particular  to  ADTC,  the  risk  assessment  methodologies, 
which  have  been  developed  over  a number  of  years  and  which  have  been 
employed  at  other  national  ranges,  have  been  tailored  to  meet  ADTC's 
particular  needs.  These  ADTC-particular  factors  include: 


m 


1.  the  nonuniform  and  occasional  high  density  distribution 
of  population  on  and  in  the  near  vicinity  of  ADTC, 

2.  the  irregular  boundary  of  the  ADTC  land  reservation. 


3. 


the  diversity  of  weapon  types  tested  and  the  varied  manners 
in  which  the  performance  and  failure  mode  characteristics 
are  described. 


4. 


the  nonlinear  character  of  the  advanced  air-to-ground  weapon 
trajectories,  and 


5. 


the  size  of  the  contrqlled  air  and  ground  space  at  ADTC  rel- 
ative to  the  range  and  maneuverability  limits  of  the  advanced 
weapons  to  be  tested. 
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Table  4-1-IV 

DENGEN  Input  Data  Required  in 
Addition  to  PTRAJ  Data 

NFM  - Total  number  of  failure  modes  being  considered 

FMODE  - Array  of  failure  mode  defining  type,  effect,  probability  of 
occurrence,  and  FTS  fragment  tvoes.  Contents  detailed  in 
Table  4-1-V. 

DLCLL  - Latitude  and  longitude  of  destruct  line  corner  points 

NDLCP  - Number  of  destruct  line  corner  points 

FTSREL  - Reliability  of  the  FTS 

NMCSMP  - Number  of  Monte  Carlo  points  to  be  calculated  for  data 
sample 

I PLOT  - Plot  control  flag 

ENHANCE  - Data  enhancement  control  flag 

SEED  - Initial  value  for  random  number  generator 

INITFLG  - Flag  specifying  whether  or  not  a previous  data  set  is  being 
updated 

CAERO  - Aerodynamic  coefficient  modifier 

CPROP  - Propulsion  table  modifier 


* 
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Table  4-1-V 


Failure  Mode  Data  Array  Structure 
FM0DE(20,10) 

IFM  * Failure  mode  subscript 

NFM  * Maximum  number  of  failure  modes 


FMODE(l.IFM) 

Guidance  effect  flag 

al 

normal  guidance 

*2 

ballistic  a a 3 * 0 

=3 

hold  last  command 

■4 

hard  turn 

=5 

seeker  wandering 

FM0DE(2,IFM) 

Propulsion  effect  flag 

=1 

normal  propulsion 

■2 

thrust  out 

=3 

thrust  variant 

FM0DE(3,IFM) 

T1 

Initial  failure  time 

FM0DE(4,IFM) 

t2 

Final  failure  time 

FM0DE(5,IFM) 

Ql  • 

a P(T] ) or  o 

FM0DE(6,IFM) 

q2 

= P(T2)  or  m 

FM0DE(7,IFM) 

Failure  time  distribution  type 

=1 

uniform 

=2 

normal 

a3 

trapizoldal 

a4 

exponential 

FM0DE(8,IFM) 

Symmetry  flag 

al 

Yes 

»2 

No 

FM00E(®,IFM) 

Number  of  FTS  fragment  type* 

FMODE(IO.IFM) 

WT  cf  fragment  type  1 

FMODE(ll.IFM) 

3 of  fragment  type  1 

FMODE ( 1 2 » I FH ) 

WT  of  fragment  type  2 
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NUMBER  OF  MONTS  CARLO  SAMPLES 


Figure  4-1-5 

Staple  DENOEN  Output  Shoving  Rate  of  Convergence  of 
Pdf  Mean  and  Standard  Deviation  for  U Coordinate 


The  inclusion  of  these  factors  along  with  the  factors  common  to  all  test 
ranges  requires  numerous  lengthy  and  repetitive  calculations.  These 
calculations  are  performed  by  Program  RISK. 

4. 1.5. 2 Program  RISK  Computational  Sequence 

As  the  final  element  in  the  ADTC  risk  assessment  methodology,  it  is 
Program  RISK  that  actually  calculates  the  measures  of  risk,  i.e.,  the 
casualty  expectations  associated  with  a given  weapon  test.  Embodied  in 
Program  RISK  is  the  logic  necessary  to  perform  the  Ec  calculations 
described  in  section  4. 1.2. 2. 2 for  air-to-ground  weapon  tests  conducted 
at  ADTC.  To  do  this  RISK  requires  the  output  of  both  Programs  PTRAJ  and 
DENGEN  or  comparable  data  from  other  sources. 

Program  RISK  is  a very  general  program  and  offers  the  range  safety 
analyst  a large  number  of  options.  The  large  number  of  user  options 
available  in  RISK  are  necessary  for  RISK  to  be  applicable  to  the  wide 
variety  of  problems  which  arise  at  ADTC.  These  options  enable  the  user 
to  deal  with  the  many  weapon  types  considered  at  ADTC,  the  multitude  of 
ways  in  which  performance  data  are  presented  or  not  presented,  and  the 
general  lack  of  available  data  or  failure  modes  and  effects.  In  addi- 
tion, the  user  options  enable  the  analyst  to  present  the  calculated 
results  in  varying  degrees  of  detail,  both  plotted  and  printed,  to  meet 
any  particular  reporting  requirements. 

The  macro  level  flow  diagram  for  Program  RISK  is  shown  in  Figure  4-1-8. 
The  computational  sequence  shown  involves  essentially. the  following 
steps: 

1.  Input  NAMELIST  data  to  the  program  and  perform  initial  data 
setup. 

2.  Input  DENGEN  data,  if  available,  and  skip  to  step  5.  Otherwise, 
proceed. 

3.  Calculate  the  mean  impact  point  for  each  failure  mode. 

4.  Calculate  the  failure  probability  for  each  failure  mode. 

5.  Calculate  the  debris  hazard  area  and  debris  penetration 
categories  for  each  failure  mode. 

6.  Establish  failure  mode  hazard  area  bounds. 

7.  From  the  master  population  library,  select  those  population 
areas  subjected  to  a possible  hazard  by  each  failure  mode. 

8.  Calculate  a conditional  Ec  for  each  of  the  selected  popu- 
lation areas  for  each  failure  mode  and  debris  type. 
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Figure  4-1-8.  RISK  Macro  Flow  Diagram 
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9.  Calculate  the  Ec  for  the  residual  population,  i.e.,  hunters, 
hikers,  etc.,  for  each  failure  mode  and  debris  type. 

10.  Calculate  the  total  Ec  for  each  area,  for  each  failure  mode 
and  each  debris  type,  and  then  calculate  the  total  Ec  for  the 
test. 


11.  Sort  the  data  for  final  output  and  identify  the  areas  of 
maximum  concern. 

12.  Print  and  plot  the  calculated  data. 

These  are  the  macro  level  functions  performed  by  Program  RISK.  The 
details  of  the  actual  calculations  are  documented  in  reference  4. 


4. 1.5. 3 Program  RISK  I/O 
4. 1.5. 3.1  RISK  Input  Data 

Program  RISK  requires  data  from  a variety  of  sources.  These  Include 
user  supplied  data;  environmental,  geographical  and  geophysical  data 
from  the  risk  assessment  data  library;  population  data  from  the  Eglin  and 
vicinity  population  library;  and  data  from  both  PTRAJ  and  DENGEN.  The 
PTRAJ  and  DENGEN  data  can  be  bypassed  if  comparable  data  is  input  as 
part  of  the  user  supplied  data.  These  data  include  the  nominal  trajectory, 
the  failure  mode  debris  PDFs,  the  geographical  location  and  orientation 
of  the  PDFs,  and  the  probabilities  cf  occurrence  of  the  failure  modes. 

The  user  supplied  data  is  input  to  Program  RISK  in  the  NAMELIST  format 
and  these  data  are  described  in  Table  4-1-VI.  The  structure  of  the 
option  list  parameter  is  shown  in  Table  4-1-VII  and  the  structure  of  the 
failure  mode  array  is  shown  in  Table  4-1-VI II. 

4. 1.5. 3. 2.  RISK  Output  Data 

The  program  output  data  has  two  main  parts:  (1)  the  output  of  the  input 
data  and  the  output  of  the  calculated  results  for  the  weapon  test,  and 
(2)  an  optional  output  consisting  of  computed  intermediate  data  useful 
for  verification  of  data  consistency,  case  setup  and  evaluation  of  the 
details  of  the  risk  assessment  calculations  on  a failure-mode-by-failure- 
mode  basis. 

The  parameters  output  are  described  In  Tables  4-1 -IX  and  4-1 -X . The 
calculated  results  consist  of:  (1)  the  total  expected  casualty  for  the 
test,  (2)  the  total  conditional  expected  casualty  for  each  failure  mode 
along  with  the  conditional  probability  of  that  failure  occurring  and  (3)  a 
list  of  the  areas  subjected  to  a hazard;  ordered  with  the  most  endangered 
area  appearing  first  and  the  least  endangered  area  appearing  last.  These 
data  are  printed  and  plotted,  and  examples  are  shown  in  Table  4-1 -XI , 

Table  4-1 -XI I and  Figure  4-1-9. 
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Table  4-1-VI 


RISK  User  Supplied  Data 


PVHIST 

- 

Vehicle  posltlon/veloclty  time  history 

PDTABI 

- 

Tabular  debris  Impact  PDFs,  (can  be  supplied 
directly  from  DENGEN) 

PLAT I | 
PLONI I 

- 

Latitude  and  lonqltude  of  PDF  mean  (can  be 
supplied  directly  from  DENGEN) 

FMI 

- 

Failure  mode  data  array  (see  Table  4-1 -VII I ) 

I OPT ION 

- 

Program  Option  Flags  (see  Table  4-1 -VI I ) 

NFM 

- 

Number  of  failure  modes 

THTAB 

- 

Thrust  table 

CLTAB 

- 

Coefficient  of  lift  table 

NTV 

- 

Number  of  points  In  thrust  table 

NLV 

- 

Number  of  points  In  lift  table 

LOD 

- 

L/D  ratio 

PHIORI  ( 

L AMOR I J 

- 

Latitude  and  longitude  of  posltlon/veloclty 
time  history  origin 

PSIORI 

- 

Azimuth  of  posltlon/veloclty  time  history 

EVALB 

- 

Array  of  latitude  and  longitude  pairs  defining 
a region  to  be  evacuated. 

ECLL 

- 

Lower  limit  of  Ec  to  be  considered  for  output 

ALTF  | 
RHORI 1 

- 

Vehicle  altitude  and  horizontal  distance  to  mean  Impact 
point  (used  only  when  a skip  lock  failure  Is  selected) 

PSEEK 

- 

Seeker  viewing  cone  half  angle 

FUELWTO 

- 

Initial  fuel  weight 

FUELFLO 

- 

Fuel  flow  rate 

FUELTNT 

■fc 

Explosive  equivalent  of  fuel  In  lbs  of  TNT 
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Table  4-1-VI  (Continued) 


WHDTNT 

ENFAC 

PKE 

STYPE 


Explosive  equivalent  of  warhead  In  lbs  of  TNT 
Blast  energy  partition  factor 
Minimum  fragment  kinetic  energy  considered  hazardous 
Seeker  type 

Date  (day, month)  for  which  hazard  analysis  Is  to  be 
applicable. 


DATE 


s 


PARAMETER 


VALUE 


MEANING 


I OPTION  (1)  1 

(2)  0 

(3)  1 

(4)  1 

(5)  1 
thru 

(14) 

(15)  0 
thru 

(24)  0 

(25)  1 

(26)  . 0 


Use  PHAZRD1 

Skip  Input  data  p/intout. 

Print  Intermediate  debug  data. 

Print  Intermediate  report  data. 

Input  Impact  latitude,  longitude 
Impact  velocity  orientation  for 
probability  density  function  for 
1th  failure  mode. 

Calculate  PDF  from  standard 
bivariate  normal  statistical 
parameters. 

Zero  out  wind  table  values. 

No  lift  considered  or  else  L/D 
Is  assumed  Input. 


«WPP3^ 

' •®~j'^?'4"-  1-vpw^ 


FM(IFM,1 ) 


FM(IFM,2) 

FM(IFM,3) 


FM(IFM,4) 

FM(IFM,5) 

FM(IFM,6) 


FM(IFM,7) 
FM(IFM,8) 
FM(IFM,9) 
FM(IFM.IO) 
FM(IFM,11 ) 


FM(IFM>12) 


Table  4-1-VIII 

Failure  Mode  Data  Array  Structure 

Data  is  input  in  FMI (25,10)  array 
Data  is  stored  in  FM( 10,25)  array 
FM(I,J)=FMI(j,n 

Failure  Mode  Name  Code 
=1.  Failure  to  Ignite 
*2.  Initial  Guidance  Failure 
=3.  Meander  Guidance  Failure 
=4.  Terminal  Guidance  Failure 
*5.  Seeker  Loss  of  Lock 
=6.  Skiplock  Failure 

Vehicle  Casualty  Area 

Failure  Mode  Type 
■±1.  discrete 
=±2.  distributed 

> 0 tabular  definition 

< 0 functional  definition 

Earliest  time  for  IFMth  failure 
Latest  time  for  IFMthi  failure 

Probability  of  IFMth  failure  occurring 

> 0 use  input  valuf 

= 0 calculate  fror  exponential  model 

< 0 calculate  fr*  W»uull  model 

Impacting  vehicle  weight 

Frontal  Area  (aerodynamic) 

$ of  impacting  vehicle 

Explosive  weight  of  warhead 

ShaDe  Factor 
=1.  Hat  Plate 
=2.  Sphere 
=3.  Cone 

Fragment  list  indicator 
=-l  new  fragment  list 
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Table  4-1-VIII  (Continued) 


«0  no  fragment  list 
=*1  same  list  as  before 

FM(IFM,13) 

Fuel  burn  flag 

=0  Bums  to  ground  (or  out) 

°1  Bums  until  failure 

FH(IFM,14) 

Number  of  warhead  fragments 

FM(IFM,15) 

Weight  of  each  fragment  (lbs) 

FM(IFM,16) 

B of  each  fragment 

FH(IFM,17) 

Number  of  small  fragments  from  vehicle 

FM(IFM,18) 

Weight  of  each  small  fragment 

FH(IFM,19) 

B of  each  small  fragment 

FM(IFM,20) 

Number  of  large  fragments  from  vehicle 

FH(IFM,21 ) 

Weight  of  each  large  fragment 

FM(IFM,22) 

B of  each  large  fragment 

FM(IFM,23) 

Warhead  casing  wt  (FM(IFM,14)=0) 

FM(IFM,24) 

Warhead  casing  thickness 

FM(IFM,25) 

Warhead  casing  inside  diameter 

4-1-36 


Can  be  repeated  for  up  to  10  failure  modes) 
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Table  4-1-XI 

***CASE7,  750LB  BOMB,  FRAGMENTATION,  NO  WIND,  L0D=0,  SKIP  LOCK 

THE  FOLLOWING  RESULTS  ARE  VALID  FOR 
MONTH  = 5 

DAY  = 5 

AT  WHICH  TIME  RESIDUAL  POPULATION  ON  THE  RESERVATION 
DUE  TO  HIKERS,  HUNTERS  ETC.  IS  ESTIMATED  TO  BE 
.92  PERSONS  PER  SQUARE  MILE 

$COMP RATION  OF  CASUALTY  EXPECTATIONS? 

TOTAL  CASUALTY  , XPECTATIONS 
FROM  ALL  CAUSES  = .87218E-02 

SUBTOTALS  FROM 

LIBRARY  ASSIGNED  POPULATION  RESIDUAL  POPULATION 

.87213E-02  .48534E-06 

CASUALTY  EXPECTATION  BY  FAILURE  MODE 

INITIAL  GUIDANCE  FAILURE 
PROBABILITY  OF  FAILURE  OCCURRING  = .43300E-01 

CASUALTY  EXPECTED  IN 

LIBRARY  ASSIGNED  POPULATION  RESIDUAL  POPULATION 

.41277E-05  . 39649E-06 

SEEKER  LOSS  OF  LOCK  SKIP  LOCK 

§ PROBABILITY  OF  FAILURE  OCCURRING  = .29400E-01 

£ 

| CASUALTY  EXPECTED  IN 

| LIBRARY  ASSIGNED  POPULATION  RESIDUAL  POPULATION 

I .871 72E-02  .88846E-07 

p 


1 


Table  4-1 -XI I 


EXPECTED  CASUALTY  BY  AREA  IN  DESCENDING  ORDER  OF  IMPORTANCE 


CASUALTY 

HAZARD 

AREA 

COORDINATES 

FAIL 

DESCRIPTOR 

EXPECTATION 

PROBABILITY 

POP 

S 

T 

MODE 

8-126 

9400 

B-75* 

. 2221 6E-02 

. 35985E-02 

21. 

50. 

87. 

2 

SYSTEMS  M-42 

8-70* 

.1901 IE-02 

.80859E-02 

8. 

53. 

87. 

2 

6300 

8-1  * 

. 94021 £-03 

.26652E-02 

12. 

48. 

86. 

2 

B-109A 

9420 

B-75* 

. 5051 3E-03 

.57275E-02 

3. 

50. 

88. 

2 

B-141 

9313 

B-70* 

•46488E-03 

. 5271 2E-02 

3. 

49. 

86. 

2 

9417 

B-l  * 

•39668E-03 

.33734E-02 

4. 

47. 

87. 

2 

8-142 

9425 

B-75* 

.37253E-03 

. 42241 E-02 

3. 

46. 

87. 

2 

8-130 

9411 

B-75* 

.3660PE-03 

.62264E-02 

2. 

48. 

88. 

2 

B-128 

9406 

B-75* 

.36453^-03 

.41333E-02 

3. 

45. 

86. 

2 

8-118 

9303 

B-70* 

.25619E-03 

.43574E-02 

2. 

55. 

85. 

2 

8-129 

9410 

B-75* 

•20709E-03 

.35221 E-02 

2. 

50. 

87. 

2 

B-127 

9403 

B-75* 

.19639E-03 

.33402E-02 

2. 

47. 

87. 

2 

B-134 

9422 

B-75* 

.17506E-03 

.19850E-02 

3. 

47. 

92. 

2 

B-109 

9408 

B-75* 

. 1 301 9E-03 

.14762E-02 

3. 

44, 

86. 

2 

B-ll 

9407 

B-75* 

. 1 301 9E-03 

.14762E-02 

3. 

44. 

86. 

2 

9306 

B-l  * 

.78350E-04 

.26652E-02 

1. 

48. 

86. 

2 

6120 

FLD6* 

. 821 92E-05 

.34948E-04 

8. 

50. 

95. 

2 

8982 

B-76* 

.37662E-05 

.39207E-05 

24. 

37. 

91. 

2 

WHSE 

9461 

C-80A* 

. 1 8031 E-05 

.26038E-05 

16. 

101. 

94. 

1 

9462 

C-80A* 

.11 270E-05 

.26038E-05 

10. 

101. 

94. 

1 

VALPARAISO 

. 1 5099E-06 

. 1 0965E-07 

318. 

81. 

85. 

1 

COMM. 

8721 

C-52N* 

.12736E-06 

.14713E-05 

2. 

101. 

90. 

1 

VALPARAISO 

•12363E-06 

. 1 6223E-07 

176. 

82. 

85. 

1 

PRISON  CAMP 

* 

.11 034E-06 

. 5781 9E-08 

450. 

79. 

85. 

1 

( 

8708 

C-52N* 

.98047E-07 

.22653E-05 

1. 

100. 

91. 

1 

NICEVILLE 

. 74576E-07 

. 1 7223E-06 

10. 

88. 

85. 

1 

NICEVILLE 

.73538E-07 

. 1 7983E-06 

10. 

87. 

85. 

1 

NICEVILLE 

. 73937E-07 

. 1 6868E-06 

10. 

89. 

85. 

1 

NICEVILLE 

.70706E-07 

. 1 6329E-06 

10. 

90. 

85. 

1 

8712 

C-52N* 

, 56648E-07 

. 6541 8E-06 

2. 

102. 

91. 

1 

C-131 

8705 

C-52* 

.56648E-07 

. 6541 8E-06 

2. 

102. 

91. 

1 

VALPARAISO 

.• 

.55972E-07 

.73446E-08 

176. 

80. 

85. 

1 

NICEVILLE 

. 56024E-07 

. 1 0398E-06 

10. 

86. 

85. 

1 

C-135 

9537 

* 

.23576E-07 

.27236E-06 

2. 

101. 

98. 

1 

NICEVILLE 

. 19646E-07 

.45372E-07 

10. 

85. 

85. 

1 

NICEVILLE 

.13947E-07 

.32210E-07 

10. 

84. 

85. 

1 

NICEVILLE 

. 10069E-07 

.23253E-07 

10. 

83. 

85. 

1 

VALPARAISO 

.95034E-08 

.48773E-08 

45. 

79. 

85. 

1 

C-132 

9434 

* 

. 3821 3E-03 

•44144E-07 

2. 

104. 

95. 

1 

Q-102 

8728 

C-52* 

.38826E-09 

. 44852E-09 

20. 

102. 

85. 

1 

C-101 

8702 

C-52* 

. 19757E-09 

.22823E-08 

2. 

100. 

85. 

1 

4-1-40 


30.6 


V 


r- 


8 

|xO* 

jl  M 

p 

to 

II  II  II  II 

It  t| 

zuiuiiu 

» • • • 

o 

-vr>- 

a. 

i- 

J -*  j j 

CIUUU 

ZQ. 

UlUMulll 

-r 

in 

o — 

i- 

UIUIUIW 
JJ  -J  -J 

a.  . 

#— • 

_ j 

r 

x< 

-j 

i'ii 

z- 

UiUiUJU) 

3£ 

u 

<o 

U1 

JZ 

CNJ 

0) 

V> 

id 

o 


CO 

.a> 


0) 


i 


0) 

L. 


O) 


I 

t 


4-1-41 


4.1.6  Risk  Assessment  Program  Capabilities  and  Limitations 

4. 1.6.1  Applicable  Weapon  Types 

Programs  PTRAJ,  DENGEN  and  RISK  have  been  designed  for  applicability  to 
the  broad  spectrum  of  air-to-ground  weapon  types  planned  for  testing  at 
ADTC  In  the  1975-1985  time  frame.  These  weapons  will  possess  advanced 
systems  to  enable  them  to  fly  preprogrammed  flight  paths  with  gliding 
and/or  thrusting  legs,  sense  their  target,  and  actively  guide  to  impact. 
These  weapons  will  be  subject  to  failure  modes  in  any  of  their  main 
systems.  The  occurrence  of  these  failure  modes  during  a test  can  result 
in  a hazard  to  the  population  in  the  vicinity  of  ADTC.  Although  there 
is  no  way  to  describe  all  of  the  possible  critical  failure  modes  for 
current  and  future  weapon  types,  the  gross  failure  modes  and  their 
effects  can  be  described.  These  failure  mode  effects  are  modeled  in 
programs  DENGEN  and  RISK,  and  they  are  of  two  types: 

1.  Propulsion  System  Failures  - failure  to  ignite  or  thrust 
deviation. 

2.  Guidance  System  Failures  - seeker  wandering,  hold  last  guid- 
ance command,  hard  turn,  ballistic,  or  skip  lock. 

Structural  failures,  if  identifiable,  can  be  modeled  as  guidance  failures 
i.e.,  a broken  vehicle  will  tumble  and  can  be  treated  as  a high  3 
ballistic  object;  a bent  fin  can  be  treated  as  a hold  last  command 
guidance  failure. 

4. 1.6. 2 Program  Assumptions  and  Limitations 

The  phenomena  associated  with  the  behavior  of  a failed  weapon  system  are 
not  well  understood  nor  are  there  sufficient  data  available  to  study  or 
completely  model  this  behavior.  The  assessment  of  the  risks  associated 
with  the  testing  of  a weapon  system  requires  that  the  impacts  of  the 
debris  associated  with  a failure  of  the  system  be  determinable.  The 
determination  of  debris  impact  points  in  turn  requires  knowledge  of  the 
behavior  of  the  failed  weapon  system.  The  consequence  of  this  is  that 
in  the  development  of  a comprehensive  risk  assessment  methodology  some 
behavioral  assumptions  were  made  and  some  performance  limitations  were 
imposed  to  fill  the  technology  and  data  voids  associated  with  the  phenom- 
ena of  failed  weapon  system  behavior. 

In  the  realm  of  lethal  or  hazardous  effects  generated  by  debris  impacts 
there  exist  considerable  data  both  theoretical  and  empirical.  These 
data  are  generally  for  particular  weapons  against  particular  targets 
and,  as  a consequence,  the  methods  and  data  have  been  extrapolated  and 
generalized  to  apply  to  the  broad  class  of  structures  on  and  in  the 
vicinity  of  ADTC. 
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Finally,  there  were  some  operational  limitations  Imposed  to  facilitate 
the  modeling  of  some  aspects  of  the  risk  assessment  problem.  These 
limitations  were  imposed  only  when  there  would  be  no  impact  on  the 
accuracy  of  the  computed  results  and  when  there  would  be  a benefit  in 
terms  of  lesser  computer  resource  requirements,  ease  of  data  handling,  a 
simplification  of  modeling  mathematics,  or  an  opportunity  to  include 
multiple  user  options  within  a single  computing  format. 

The  following  is  a list  of  assumptions  and  limitations  that  pertain  to 
the  ADTC  risk  assessment  methodology: 

1.  All  buildings  are  square  and  the  people  within  are  uniformly 
distributed. 

2.  The  impact  PDFs  are  constant  over  the  area  and  in  the  near 
vicinity  of  buildings. 

3.  A hazard  exists  to  all  population  exposed  to  a 2~ps1  over- 
pressure or  to  fragments  with  a kinetic  energy  greater  than  33 
ft-lbs,  and  at  least  30-psi  overpressure  is  required  to  pose 

a hazard  to  sheltered  populatioh  when  the  building  is  not  di- 
rectly hit. 

4.  The  energy  generated  at  impact  is  proportioned  between  crater- 
ing, plastic  deformation  of  the  vehicle,  the  generation  of 
overpressure  and  the  generation  of  fragments. 

5.  At  impact,  no  more  than  three  classes  of  fragments  are  generated. 

6.  The  use  of  the  FTS  will  generate  no  more  than  three  types  of 
debris  in  addition  to  the  intact  vehicle. 

7.  The  probability  of  occurrence  of  each  of  the  vehicle  failure 
modes  can  be  estimated  from  either  reliability  data  or  histor- 
ical data. 

8.  The  weapon  has  no  more  than  10  failure  modes  (can  be  increased 
if  necessary).  When  FTS  is  used,  each  debris  category  is 
treated  as  a separate  failure  mode. 

9.  All  of  the  random  processes  which  affect  the  vehicle  process 
or  after-failure  performance  are  either  uniform  or  normal. 

Time  of  failure  is  an  exception  and  it  is  functionally  modeled 
over  a closed  interval. 

10.  If  a seeker  loss-of-lock  failure  occurs,  it  is  assumed  that 
the  weapon  will  home  on  any  building  within  its  visual  cone 
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at  the  time  of  failure.  The  probability  of  Impacting  the 
building  is  the  same  as  Impacting  within  the  ellipse  formed 
by  projecting  the  seeker  visual  cone  upon  the  ground. 

11.  A 3-OOF  model  Is  used  to  predict  Impact  point  locations,  and 
It  Is  assumed  that  the  physical,  aerodynamic,  and  performance 
data  are  available  or  can  be  estimated  for  use  In  the  3-OOF 
model . 

12.  If  a vehicle  stalls,  It  Is  assumed  to  tumble  and  Is  treated 
as  a low  6 ballistic  object. 

13.  The  vehicle  destruct  boundary  Is  a closed  polygon. with  no 
more  than  10  corner  points  (an  arbitrary  limit  that  can 
easily  be  extended  If  necessary).  The  vehicle  launch  point 
must  be  Interior  to  this  polygon. 

14.  The  location  of  the  target  must  be  Included  as  the  last  point 
in  the  vehicle  position/velocity  time  history. 

15.  There  are  a number  of  program  specific  limitations  such  as  the 
number  of  data  Items  permissible  In  a given  data  table.  These 
program- specific  items  are  detailed  in  the  Individual  program 
documents. 
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4.2  KWAJALEIN  MISSILE  RANGE  (KMR)  RISK  ANALYSIS  TECHNIQUES 

4.2.1  General 

Performance  of  risk  analyses  at  KMR  is  intended  to  satisfy  one  or  more 
of  the  following  applications:  to  serve  as  limiting  criteria;1  to  provide 
a measure  of  safety  solution  adequacy,  for  comparative  purposes?  and  to 
provide  documented  evidence  of  the  depth  of  analysis  performed  in  develop- 
ment of  a safety  solution.  In  most  cases  a preliminary  estimate  of  the 
risk  level  is  obtained  using  simplified  models  that  assume  only  one 
impacting  piece,  no  abnormal  missiles  and  bivariate  Gaussian  distribu- 
tions. Depending  upon  the  level  of  risk  indicated  and  the  nature  of  the 
program  being  evaluated,  i.e.,  guided  or  unguided  missile,  a more  thorough 
risk  analysis  might  be  undertaken.  The  four  applications  of  the  results 
of  the  analyses  are  discussed  in  more  detail  in  the  following  paragraphs. 

4. 2. 1.1  Limiting  Criteria 

Results  of  a risk  analysis  are  used  for  establishing  or  limiting  the 
risk  that  will  be  accepted  for  a given  test  or  series  of  tests.  The  use 
of  actual  risk  values  is  preferred  over  that  of  stating  an  acceptable 
criterion  based  on  the  term  sigma  since  the  usual  connotation  of  sigma 
is  associated  with  the  normal  distribution  of  a single  variable,  i.e., 

3 o = 99.7:1.  It  should  be  noted  that  an  acceptable  risk  is  influenced 
by  many  other  elements,  i.e.;  national  need,  confidence  level,  etc.,  and 
therefore  an  acceptable  risk  for  all  tests  cannot  be  established. 

4. 2. 1.2  Measure  of  Safety  Solution  Adequacy 

Risk  analyses  are  used  not  only  in  determining  the  constraints  that  must 
be  placed  or  a proposed  test  but  to  evaluate  the  residual  risk  after  the 
constraints  are  imposed.  In  this  manner  a determination  can  be  made  as 
to  the  degree  of  protection  that  has  been  gained  through  imposing  various 
safety  restrictions,  i.e.,  flight  termination  systems  (FTS),  and  a 
judgment  can  be  made  as  to  the  worth  of  the  restriction.  Again,  the 
number  of  restrictions  and  the  resulting  decrease  in  residual  risk  must 
be  weighed  against  the  impact  on  the  proposed  test  or  tests  and  a thresh- 
old established  based  on  all  factors  affecting  the  test. 

4. 2. 1.3  Comparative  Purposes 

Risk  analyses  are  used  to  compare  the  residual  risk  resulting  from  al- 
ternative safety  scenarios.  In  this  manner  the  scenario  can  be  chosen 
which  provides  the  lowest  residual  risk  and  the  fewest  restrictions  on  a 
proposed  test.  It  is  important  to  note  than  when  using  risk  analyses 
for  comparative  purposes,  the  same  model  and  assumptions  must  be  used  in 
each  evaluation. 
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4. 2. 1.4  Documented  Evidence  of  Safety  Evaluation 

Documentation  of  risk  analyses  provides  reference  data  that  is  inval- 
uable in  the  event  of  a safety  incident.  In  addition  it  provides  an 
excellent  source  of  reference  material  for  future  evaluations  of  similar 
programs. 

4.2.2  Risk  Analysis  Models 

4.2.2. 1 General 

As  stated  previously,  a preliminary  estimate  of  the  risk  associated  with 
a particular  test  is  usually  obtained  using  simplified  models  which  pro- 
vide a quick-look  approximation.  If  the  risk  calculated  appears  to  be 
excessive,  more  detailed  analysis  is  then  performed  u^ing  more  rigorous 
models.  The  simplified  models  currently  being  used  are  limited  to  the 
evaluation  of  normal  missiles  only,  assume  bivariate  Gaussian  dispersion 
distributions  (either  circular  or  elliptical)  and  only  a single  impact- 
ing piece.  The  more  rigorous  models  have  the  capability  of  analyzing 
situations  considering  both  normal  and  abnormal  missiles,  safety  system 
effects  and  wind  contributions  to  debris  drift  and  impact.  Each  of 
these  models  is  discussed  in  the  following  paragraphs. 

4. 2. 2. 2 Circular  Dispersion  Model 

The  circular  dispersion  model  calculates  the  probability  of  impact  (Pi) 
on  a given  area  given  the  following: 

• location  of  the  nominal  impact  point  of  the  object  producing 
the  hazard, 

• distance  from  the  nominal  impact  point  to  the  near  and  far 
side  of  the  area  of  interest, 

• circular  dispersion  about  the  nominal  impact  point,  and 

• size  of  the  area  of  interest. 

The  geometry  for  this  model  is  shown  in  Figure  4-2-1  along  with  the 
equation  used  for.  computing  Pt.  This  algorithm  is  currently  programmed 
on  a Hewlett  Packard  65' calculator  and  the  program  Instructions  are 
given  in  Figure  4-2-2.  This  model  assumes  bivariate  Gaussian  distrib- 
uted dispersions,  normal  missiles  and  a single  impacting  object. 

4.2.2. 3 Elliptical  Dispersion  Model 

When  the  impact  dispersion  of  an  object  cannot  be  closely  approximated 
by  a circle,  a model  employing  an  elliptical  bivariate  Gaussian 
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distribution  Is  used  for  a preliminary  approximation  of  the  risk  level. 
This  model  is  more  flexible  than  the  circular  model  in  that  distances 
from  the  impact  point  to  the  area  of  interest  are  calculated  and  pro- 
visions are  made  to  vary  the  dispersions  so  that  the  model  can  be  used 
for  parametric  studies  during  test  planning.  The  geometry  upon  which 
this  model  is  based  is  shown  in  Figure  4-2-3.  The  model  is  currently 
being  run  on  a CDC  7600  and  copies  of  the  program  are  available  upon 
request.  Inputs  required  are: 


I latitude  and  longitude  of  the  nominal  impact  point, 

• semi-major  and  semi-minor  axes  of  the  impact  dispersion, 

i 

• latitude  and  longitude  of  the  center  of  the  area  of  interest,  and 
I size  of  the  area  of  interest. 

Assumptions  used  in  developing  this  model  are  bivariate  Gaussian  dis- 
tributions and  a single  impacting  piece. 

4. 2. 2. 4 Risk  Contour  Model 

This  model  is  used  when  preliminary  estimates  from  the  models  discussed 
earlier  indicate  a marginal  risk  or  when  a detailed  analysis  is  desired. 
The  model  was  developed  to  handle  both  normal  and  abnormal  missiles, 
winds,  and  effects  caused  by  activation  of  the  missile  destruct  system. 
The  total  model  consists  of  three  separate  computer  programs  which  are 
run  sequentially,  i.e.,  the  output  of  the  first  is  the  input  to  the 
second,  etc. 

.The  purpose  of  this  model  is  to  generate  contours  of  constant  impact 
probability  per  square  foot.  These  contours  are  typically  used  to  es- 
timate the  risk  of  impacting  fragments  in  selected  areas.  An  example  of 
the  results  is  shown  in  Figure  4-2-4  for  a SPRINT  missile  launch  from 
Meek  Island  in  the  Kwajalein  Atoll. 

4. 2. 2. 4.1  Footprint  Generator  Program 

This  program  utilizes  a nominal  trajectory,  wind  data  and  malfunction 
turn  information  to  determine  the  impact  points  or  footprints  for  a 
specified  range  of  ballistic  coefficients  having  nominal  and  1-sigma 
winds,  1-sigma  malfunction  turns  and  1-sigma  dispersion.  The  output 
consists  of  five  impact  points  for  each  specified  time  point  on  the 
trajectory  and  ballistic  coefficient  combination.  These  points  provide 
the  foundation  for  the  construction  of  a 1-sigma  wind  impact  ellipse  and 
a 1-sigma  malfunction  turn  ellipse  which  are  computed  in  the  Impact 
Probabilities  Analysis  Program.  The  output  is  in  the  form  of  punched 
cards. 
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4. 2. 2. 4. 2 Impact  Probability  Analysis  Program 

The  purpose  of  this  program  is  to  compute  the  probability  of  impacting 
at  least  one  piece  of  debris  at  each  point  on  a specified  grid.  The 
computed  probability  at  each  grid  point  is  output  on  tape  which  is  used 
by  the  third  program  of  this  model  to  produce  contour  plots  of  constant 
probability.  Input  data  is  read  from  the  punched  cards  produced  by  the 
Footprint  Generator  Program.  This  data  is  converted  into  1-sigma 
ellipses  which  are  combined  with  failure  probability  data  to  yield 
impact  probability. 

The  program  is  divided  into  two  parts.  First,  an  evaluation  of  "close- 
in"  (normally  the  general  vicinity  of  the  launch  point)  impact  proba- 
bilities is  performed.  When  this  phase  is  completed,  the  "far-out" 
region  is  evaluated.  Finally,  in  the  close-in  region  the  computation  at 
each  grid  point  is  performed  for  the  time  span  specified  up  to  some 
value  tmax.  In  the  far-out  region  the  computation  is  performed  only  for 
those  times  at  which  a nominal  impact  may  occur  near  the  downrange  axis. 
This  choice  was  made  to  reduce  the  time  required  for  computation. 

The  computed  (and  plotted)  Impact  probability  is  per  unit  area.  To 
determine  the  impact  probability,  the  probability  per  unit  area  is 
multiplied  by  the  size  of  the  area  of  interest.  This  will  yield  the 
approximate  probability  that  at  least  one  fragment  impacts  within  the 
area  of  consideration.  These  programs  are  currently  being  run  on  a 
General  Electric  615  computer  at  the  Ford  Aerospace  and  Communications 
Corporation,  Aeronutronic  Division.  It  is  anticipated  that  considerable 
effort  would  oe  required  to  adapt  this  model  for  use  on  other  computer 
systems. 
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4.3  PACIFIC  MISSILE  TEST  CENTER  (PMTC)  RISK  ANALYSIS  MODELS 
4.3.1  Hazard  Analysis  for  TOMAHAWK  Cruise  Missile  Inland  Tests 
4. 3. 1.1.  Introduction 


The  following  material  is  from  "Hazard  Analysis  for  TOMAHAWK  Cruise 
Missile  Inland  Tests"  prepared  for  PMTC  by  J.  H.  Wiggins  Corp.,  Redondo 
Beach,  California.  In  compiling  this  material,  Wiggins  Corp.  used  a 
computer  program  which  calculates  risk  to  population  centers,  vehicles 
and  aircraft  along  the  missile  route.  As  seen  in  subparagraph  4. 3. 2.2, 
this  computer  program  may  be  used  to  determine  the  hazards  produced  by 
any  vehicle  which  flies  along  a predetermined  route  and  whose  probability 
of  failure  is  known. 


4. 3. 1.2  Hazard  Computation  Models 

The  models  used  to  compute  the  impact  hazards  and  the  air  collision 
hazards  for  the  cruise  missile  are  described  in  the  following  sections. 
These  models  are  general  in  nature  and,  thus,  could  be  used  to  analyze 
the  hazards  for  any  airborne  vehicle  flying  a predefined  flight  path. 

4. 3. 1.2.1  Impact  Hazards  Model 

Impact  hazards  are  the  hazards  to  populated  locations,  roads  or  other 
critical  locations  on  the  ground  due  to  the  potential  impact  of  debris 
from  an  airborne  vehicle.  The  hazards  are  expressed  in  terms  of  prob- 
abilities of  impact  and  casualty  expectations.  They  are  computed  for 
each  vehicle  mode  of  failure  which  can  result  in  impacting  debris  and 
for  each  fragment  resulting  from  the  failure.  The  model  developed  to 
compute  these  hazards  is  designed  to  analyze  a single  fragment  (result- 
ing from  a given  failure  mode)  at  a time.  If,  however,  multiple  frag- 
ments have  a common  impact  distribution  due  to  a failure  anytime  during 
flight,  the  hazards  resulting  from  these  fragments  can  be  analyzed 
simultaneously.  Similarily,  if  multiple  failure  modes  will  result  in 
common  fragments  and  corresponding  fragment  impact  distributions,  these 
failure  modes  can  be  treated  as  a single  failure  mode  with  a failure 
rate  (probability  of  failure  per  second)  equal  to  the  sum  of  the  indi- 
vidual failure  rates. 

The  impact  hazards  model  is  developed  assuming  that  the  following  data 
are  known  (refer  to  Figure  4-3-1). 

1.  ^he  locus  of  the  mean  impact  point  for  a fragment(s)  from  a 
failed  vehicle  as  a function  of  the  flight  time  at  which  the 
failure  occurred.  The  locus  is  approximated  as  piecewise 
linear  and  defined  by  specifying  the  coordinates  (latitude  and 
longitude)  of  the  end  points  of  the  linear  segments. 
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Figure  4-3-1.  Impact  Hazards  Model 


2.  The  impact  distribution  for  the  fragment(s)  defined,  as  a 
function  of  flight  time,  in  terms  of  the  principal  1 -sigma 
impact  uncertainties  (05,  an)  and  the  orientation  of  the  prin- 
cipal 5 axis  (a  bivariate  normal  impact  distribution  is  assumed). 

3.  The  vehicle  failure  rate  as  a function  of  flight  time  for 
the  failure  mode{s)  being  considered. 

4.  The  casualty  area  for  the  impacting  fragment(s)  as  a function 

of  flight  time.  For  multiple  fragments  the  sum  of  the  individual 
casualty  areas  is  used. 

5.  The  size  (land  area),  location  (coordinates  of  the'  centroid) 
and  population  of  critical  locations. 

6.  The  width,  traffic  density  (occupants  per  nnii ) and  the  co- 
ordinates of  the  end  points  for  segments  of  roads.  (Each  road 
is  assumed  to  be  straight.) 

To  compute  the  hazards,  the  total  vehicle  flight  time  is  segmented  into 
a series  of  short  time  intervals  with  each  interval  represented  by  an 
intermediate  flight  "failure  time."  Tne  fragment  impact  distribution 
for  each  failure  time  is  weighted  according  to  the  probability  of  a 
failure  occurring  during  the  corresponding  time  interval.  The  failure 
times  are  closely  spaced  so  that  the  fragment  impact  distributions  for 
successive  failure  times  overlap  sufficiently  (as  depicted  in  Figure 
4-3-1)  to  simulate  the  actual  continuous  distribution.  The  hazards  are 
computed  for  each  failure  time,  for  each  critical  center,  and  for  each 
road.  The  total  hazards  for  a given  critical  center  or  road  are  ob- 
tained by  summing  the  results  over  all  failure  times.  A functional  flow 
diagram  of  the  computations  is  shown  in  Figure  4-3-2.  The  computations 
for  a given  failure  time  are  described  in  further  detail  in  the  following 
paragraphs. 

4. 3. 1.2. 1.1  Impact  Probability 

For  a given  failure  time,  the  latitude  and  longitude  of  the  mean  fragment 
impact  point  are  obtained  by  interpolation  of  the  mean  impact  point 
locus  data.  The  orientation  of  the  impact  distribution  principal  5-axis 
(see  Figure  4-3-1)  and  the  principal  impact  uncertainities  (05,  an)  are 
also  obtained  using  linear  interpolation.  The  impact  distribution  is 
assumed  to  be  bivariate  normal  and,  thus,  the  impact  probability  density 
function  (PDF)  is  given  by 

PU,n)  = Tiio^  exP  ["’s  ( C2/o|  + n2/°*)  ^ 


Figure  4-3-2.  Impact  Hazards  Model  Functional  Flow  Diagram 
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The  conditional  probability  of  one  fragment  impacting  on  a given  critical 
center,  given  that  a failure  has  occurred,  is  obtained  by  integrating 
the  PDF  over  the  land  area  of  the  center.  To  perform  this  integration, 
the  critical  center  is  assumed  to  be  square  with  sides  parallel  to  the 
principal  ?-n  coordinate  axes. 

The  conditional  probability  of  one  fragment  impacting  on  a road  segment 
is  computed  by  defining  the  impact  probability  density  along  the  length 
of  the  road.  Since  the  fragment  impact  PDF  is  assumed  to  be  bivariate 
normal,  this  conditional  density  will  be  normally  distributed  as  shown 
in  Figure  4-3-3. 


It  is  assumed  that  the  density  is  constant  over  the  width  (w)  of  the 
road.  The  conditional  impact  probability  is  given  by 


where 


(2) 


Pr  (u)  is  the  impact  probability  density  along  the  road> 


ux,  U2  are  the  u coordinates  of  the  ends  of  the  road  segment. 
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If  multiple  impacting  fragments  are  to  be  considered,  the  probability  of 
impact  becomes  the  probability  of  one  or  more  fragments  impacting  a 
critical  center  or  a road.  This  probability  is  given  by 


In 


= 1 


-(-,)■ 


(3) 


where 

Pj  is  the  conditional  probability  of  impact  for  one  fragment 
n is  the  number  of  fragments. 

The  impact  probabilities  discussed  thus  far  have  been  conditional  prob- 
abilities based  on  the  assumption  that  a failure  has  occurred.  These 
probabilities  must  be  weighted  by  the  probability  of  occurrence  of  a 
failure  during  the  current  flight  time  interval.  This  failure  prob- 
ability is  obtained  by  integrating  the  vehicle  failure  rate  over  the 
flight  time  interval.  Total  impact  probabilities  are  computed  by  summing 
the  weighted  values  over  all  flight  time  intervals. 

4. 3. 1.2. 1.2  Casualty  Expectation 

The  casualty  expectation  for  a critical  center  or  a road  is  equal  to  the 
weighted  probability  of  one  fragment  impacting  times  the  expected  number 
of  casualties  given  impact  as  given  by 

PIAC  (4) 

T N 


Ec  = 


where 


Pj  = probability  of  one  fragment  impacting  the  critical 
center  or  the  road  (weighted  by  the  probability  of  a 
failure  during  the  time  interval) 

Aq  = casualty  area  of  the  fragment(s) 

A = land  area  of  the  critical  center  or  road 

N = number  of  people  in  the  center  or  on  the  road 

4. 3. 1.2. 2 Aircraft  Collision  Model 

The  purpose  of  the  air  collision  model  is  to  provide  an  estimate  of  the 
probability  of  a collision  between  the  cruise  missile  and  an  aircraft. 
It  is  assumed  for  this  analysis  that  no  evasive  action  is  taken  by 
either  the  pilot  of  the  aircraft  or  the  remote  "pilot"  of  the  missile. 
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To  compute  the  probability  of  collision,  the  flight  path  of  the  vehicle 
is  considered  in  segments  over  which  the  missile  heading,  speed  and 
altitude,  and  the  aircraft  traffic  (across  the  flight  path  segment)  are 
reasonably  constant.  The  collision  probability  is  computed  for  each 
segment  and  the  results  are  summed  over  all  segments. 

Consider  a flight  path  segment  of  length  D as  illustrated  in  Figure  4-3-4. 


Figure  4-3-4.  Air  Collision  Model  Geometry 


Let  the  space  occupied  by  the  missile  and  by  a typical  aircraft  be 
approximated  by  the  boxed-in  regions  defined  by  the  length,  width  and 
height  of  the  vehicles.  Let 

L^  = length  of  the  missile 

= width  of  the  missile  (wing  span) 

= height  of  the  missile  (including  fins) 

La  = length  of  a typical  aircraft 

W A = width  of  a typical  aircraft  (wing  span) 

= height  of  a typical  aircraft  (including  fin  and  landing 
gear) 

V ^ = speed  of  the  missile 

VA  = average  speed  of  an  aircraft  in  the  direction  orthogonal 
to  the  missile  flight  path  segment 

F^  = frequency  of  aircraft  crossing  the  missile  flight  path 
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Aircraft  will  be  treated  as  If  they  are  heading  In  a direction  ortho- 
gonal to  the  missile  flight  path  segment  at  speed  Va-  The  actual  air- 
craft heading  will  not  significantly  affect  the  collision  probability 
unless  the  heading  is  nearly  parallel  to  the  missile  heading. 

The  probability,  P(D),  of  a collision  while  the  missile  traverses  a 
segment  can  be  expressed  as  follows: 

(5) 

P(0)  = P(C)  • P( I |C)  • P( A) 


where 


P(C)  * probability  of  an  aircraft  crossing  the  segment  during 
passage  of  the  missile 

P(I/C)  a probability  of  collision  given  an  aircraft  crossing  and 
assuming  both  vehicles  are  at  the  same  altitude 

P (A)  = probability  of  the  two  aircraft  being  sufficiently  close 
in  altitude  to  collide. 


Assuming  that  the  frequency  of  aircraft  is  small  enough,  the  probability 
of  a crossing  can  be  approximated  by 

(6) 

p/c\  _ missile  traversal  time 
v ' ” time  between  aircraft 

o/vM 

= */fa 

Referring  to  Figure  4-3-4,  it  is  seen  that  the  time  (TA)  that  any  part 
of  an  aircraft  is  in  the  collision  zone  is  given  by 


tA  = 


WM  + LA 


(7) 


The  distance  traveled  by  the  missile  during  thi ; time  is 
Di  * TA  VM 


(8) 


The  portion  of  the  flight  path  segment  through  which  the  centroid  of  the 
aircraft  could  pass  and  be  struck  by  the  missile  is  seen  to  be  of  length 
D2  (refer  to  Figure  4-3-4) 


where 


(9) 


°2  = W 0, 
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The  ratio  of  this  distance  to  the  length  of  the  flight  path  segment 
represents  the  probability  of  the  aircraft  crossing  at  a point  where  it 
would  be  struck  if  both  vehicles  were  at  the  same  altitude.  Thus, 

P(I|C)  = Jj2-  {10> 

In  order  to  compute  the  probability  of  the  vehicle  altitudes  being 
sufficiently  close,  it  is  assumed  that  the  probability  distributions 
for  the  altitudes  of  the  two  vehicles  are  normally  distributed  with 
specified  means  and  uncertainties.  Let 

PA(h)  = normal  density  function  for  aircraft  altitude 

P^(h)  = normal  density  function  for  the  missile  altitude 

Let  the  altitudes  of  the  missile  and  the  aircraft  be  specified  by  the 
altitudes  of  their  respective  centroids.  Referring  to  Figure  4-3-5,  it 
is  seen  that  the  aircraft  altitude  would  have  to  be  within  the  region 
(Hf]  + H^)  about  the  missile  for  a collision  to  result. 


ha 


Figure  4-3-5.  Altitude  Collision  Geometry 


Consider  the  missile  altitude  to  be  within  an  increment  of  altitude,  dh. 
The  corresponding  probability  of  the  vehicle  altitudes  being  sufficiently 
close  to  result-in  a collision  is  approximated  by 


Pm^)^  Pfl(h)  (Hm  + Ha) 

Summing  over  all  altitude  increments  gives  the  result 


W'  * 


Using  equations  6 through  11  with  equation  5 gives  the  collision  proba- 
bility relation 


P(D)  = Fa 
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4. 3. 1.3  REQUIRED  DATA 

The  data  used  in  computing  the  impact  and  air  collision  hazards  are 
presented  in  this  section. 

4. 3. 1.3.1  Impact  Hazards  Data 

The  data  used  for  the  computation  of  the  hazards  to  critical  centers  and 
roads  are  presented  in  the  following  paragraphs. 

4. 3. 1.3. 1.1  Impact  Distribution 

A dispersion  analysis  was  performed  by  General  Dynamics  to  determine  the 
limiting  impact  ranges  for  fragments  resulting  from  various  types  of 
failure  of  the  cruise  missile.  All  types  of  single  failures  which  would 
result  in  the  abnormal  impact  of  missile  debris  were  included.  The 
impact  ranges  are  expressed,  in  terms  of  downrange  (x)  and  crossrange  (y) 
distances  from  the  position  of  the  missile  at  failure.  The  downrange 
direction  is  defined  as  the  direction  of  the  missile  horizontal  velocity 
just  prior  to  a failure.  The  limiting  impact  ranges  account  for  all 
sources  of  impact  dispersion  except  that  the  crossrange  dispersion  does 
not  account  for  guidance  system  drift.  This  drift  contribution  will  be 
accounted  for  later. 


The  limiting  Impact  ranges  account  for  all  impacting  fragments  such  that 
the  impact  points  for  all  fragments  lie  within  the  region  defined  by  the 
limiting  values.  Since  dispersion  data  were  not  developed  separately 
for  each  impacting  fragment,  the  impact  distribution  is  assumed  to  be 
the  same  for  all  fragments.  A bivariate  normal  Impact  distribution  is 
assumed  using  the  limiting  impact  ranges  as  3-sigma  values.  The  parameters 
defining  the  distribution  are  the  downrarge  distance  (D)  from  the  missile 
position  at  failure  to  the  mean  impact  point  of  the  fragments  and  the 
downrange  (c^r)  and  crossrange  (o^R)  1-sigma  impact  uncertainties. 

These  are  computed  as  follows: 


D 


'min 


X 


max 


(13) 
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z 
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X - X 
max  min 


’OR 


(14) 


'max 


’CR 


(15) 


where 


X X 
min’  max 


max 


= minimum  and  maximum  downrange  distance  to  impact, 
= maximum  crossrange  distance  to  impact. 


Using  the  data  developed  by  General  Dynamics,  the  impact  distribution 
parameters  were  computed  for  each  failure  mode.  These  are  presented  in 
Table  4-3-1  where  failure  modes  having  the  same  impact  distribution  have 
been  grouped  together.  Results  are  presented  for  both  start  of  cruise 
(SOC)  and  end  of  cruise  (EOC)  missile  mass  properties.  The  values  for 
the  loss  of  RF  carrier  failure  mode  are  based  on  Xmax  values  which 
differ  from  those  given  in  the  General  Dynamics  study  in  that  the  distance 
traveled  by  the  missile  (on  track)  for  the  assumed  30-second  delay 
between  loss  of  carrier  and  flight  termination  was  excluded.  This  was 
done  since  the  missile  would  be  performing  normally  (barring  a second 
failure)  up  to  the  time  of  termination  and,  thus,  vehicle  "failure"  does 
not  actually  occur  until  activation  of  the  termindtion  system.  The 
revised  Xmax  values  are  1.040  for  SOC  and  0.897  for  EOC. 

By  reviewing  the  parameters  presented  in  Table  4-3-1,  it  is  seen  that 
the  values  do  not  have  large  variations  over  the  various  failure  modes 
or  in  going  from  SOC  to  EOC.  This  is  the  case  ir,  particular  for  oqr 
which  is  the  most  significant  parameter  in  computing  the  impact  hazards. 
Thus,  a conservative  approach  was  used  wherein  the  maximum  values  for 
the  three  parameters  were  assumed  to  apply  to  all  failure  modes  and 
flight  times  (SOC  to  EOC).  Thus, 


D = 1.46  nmi 


= 0.40  nmi 
oCR  =0.44  nmi 


(16) 


This  allows  for  the  computation  of  the  impact  hazards  for  all  failure 
modes  simultaneously  and  as  a result,  greatly  reduces  the  computations 
required. 

As  mentioned  earlier,  the  crossrange  impact  uncertainty  does  not  include 
the  effect  of  guidance  system  drift.  The  maximum  drift  rate  for  the 
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missile  is  1.0  nmi  per  hour.  Because  the  drift  error  of  the  missile  is 
corrected  periodically  at  TERCOM  updates,  the  maximum  drift  that  can 
occur  is  a function  of  the  maximum  time  between  updates.  This  time  is 
estimated  to  be  0.5  hour.  Thus,  the  maximum  crossrange  drift  is  0.5  nmi. 
This  is  assumed  to  be  a 3-sigma  dispersion.  Since  the  drift  contribu- 
tion is  relatively  small,  it  is  assumed  that  this  maximum  drift  disper- 
sion is  applicable  throughout  flight.  Combining  the  drift  effect  with 
the  crossrange  uncertainty  of  equation  16  gives  the  result 


(.44)2  + 


(¥)' 


= 0.47  nmi 


The  locus  of  the  mean  impact  point  for  the  fragments  is  computed  from 
the  flight  path  of  the  missile  (position  versus  flight  time)  and  the 
distance  F.  The  mean  impact  point  coordinates  corresponding  to  a given 
flight  time  are  obtained  using  the  relations 


x = x + 


D sina 
REcos<j> 


= 4>  + 


D COSa 


where 


I 


IfK 


<M  = latitude  and  longitude,  respectively,  of  the  mean  frag- 
ment i,.pact  point  (radians), 

<M  = latitude  and  longitude,  respectively,  of  the  vehicle 
position  at  the  time  of  failure  (radians), 

a = azimuth  of  the  downrange  direction  (measured  clockwise 
from  north), 

Re  = local  radius  of  the  earth  (nmi). 

The  resulting  mean  impact  point  locus  is  presented  in  Tables  4-3-1 I 
through  4-3-1 V for  the  nominal  and  alternate  flight  path  from  Naval 
Weapons  Center  (NWC)  to  Dugway  Proving  Ground  (DPG)  and  the  nominal  and 
alternate  flight  path  segment  from  Vandenberg  AFB  (VAFB)  to  NWC. 

4. 3. 1.3. 1.2  Failure  Probability 

The  probability  of  occurrence  for  the  various  types  of  vehicle  failure 
has  been  estimated  by  General  Dynamics.  The  results  are  reflected  in 
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Table  4-3- I I . Mean  Impact  Point  Locjs  - NWC  to  DPG  - Nominal  Flight  Path 


FLIGHT  TIME  (SEC.) 

MEAN  IMPACT  POINT 

.OOWNRANGE 

AZIMUTH 

.(Deg.) 

LATITUDE  (Deg.) 

LONGITUDE  (Deg.) 

0,0 

Ji/,6 

•159,0 

Mirs.o  :*s 

• &&359.0  if 

&&S75'0£  ■ 

•389,1 
• 405,8 

855,3 

ipao.i^ 
Kd«97,27| 
&?10,l  il 

1016.4  • 

1034.2 

1047.9 
p627.5  ^ 
p:i64i,9  :: 
^1660,1.^ 

1800.6 

1870.4 

1892.0 

E*  1956,3  > 
gl97i,2  \? 
{$1942,4  y 

2424.1 

2438.5 

2457.9 
^2775,3?- 
|%2793,7  .•« 
{£.2806,0  J 

2822.6  . 

. : 2918,9 

'2939,6 

296 1.4  ‘4 
# 3222,7  / . 
Sf>'3234,9  ••; 

3246.3 

3260.1 
’3281,0  , 

^ 3295,6  * 
3313,7 
..  . 3326,8 

3340,1 

3355.5 
. 3372,7 

3565.6 

*•35*5209 
35.0126 
. ^35.8508  « 
^r3S.8756  • 
^36,1407  i 
36.1703 
•36,2007 
. ^36,2350  . 

P/  37*1422.’-'  • 

£*37, 1949 .« 
£•37,22053 
37.2377 
37.3717 
37,3856 
'.|^37V3878-2 
*£37.5329  :< 
3&37.,Si3l  ‘5 
37.4669 
37,2298 
37.2179 
. ^'37,2233  5 
^37 . 2443  o 
2*37,2654  ;* 
37.2917 
37.9589 
37.9920 
*v38,Q339  H 
?%38.7020  ? 
SS38.7360  ;i 
•38,7567 
•38,7724 
38.8004 

38, 92 12  .15 
£*30,9691  ’? 

• .^.•,39, 5192;,/ 
39,5434 
' 39.5636 
39.5812 
^;‘39,6112  '' 

£ 39,6202  * 

: -39.6234  . 

39.6314 
39,6552 
39.6780 
39,7154 
. 40,1065 

•117,5978 
•117,5353 
'£•117,5033 
#>117,4743. 
£££•117,  1242- 
•117,1066 
‘•117,1035 
•117,1133 
^•117,4405- 
£>117.4399 
S&U7.402S. 
•117,3764 
•117,1513 
•117,1073 
17,0709'. 

{s>l  15;5456- 
&•llS.5ll0.  . 
••115,4733 
•115,0923 
•115,0350 
§•114,9786 
^•114,8106 
fiS-114,T783 

* •114,7490 
•113,9536 
•113,9402 

*>113.9497: 

£'•113,9547* 

• £-113, 9070 

•113,0856 
-•113,8436 
• 113,6235- 
113, 5975- 
*•113.6000  • 

©.•113,6000 
•ll3,5839 
••113,5658 
•113,5337 
**••113,4087 
>113,4515 
-•113,4009 
•113,3669 
•115,3386 

' •113,3109 

•113,3018 
•113,1508 

10,00  ' 
10,00  * 
.35,00 

47.00  h* 
.'47,00  . r 

20.00  - 

9,00  7 

•343,0  S 
-343,0  :> 

• 'i-;  io,o.  ■;* 

W00\ci 
54,00  * 

54.00  • 

71.00  t 
*83.00  yZ\ 
;83,00  /-! 
5io2,o:  > 

130.0  • 
130,0-  * 

100.0  - 
582, 00.':;,- 
*~82*oo  ;-i 
564,00 

45.00  *- 

45.00  i 

23.00  : 
US-; 50 

.50 

. r.25,00,V-> 

39.00  \ 

59.00  ? 

59.00  - 

-28,00  -'y 
;^o. oo  ~ 

£ 0,00'  .-3 

15.00  : 

27.00  ? 

48.00  5 
.48,00  •*? 

65.00  *' 

62.00  7 

• 02,00  -| 

57.00  *{ 

42.00  ,-| 

15.00  -4 

15,00  ] 
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able  4-3- III.  Mean  Impact  Point  Locus  - VAFB  to  NWC  - Nominal  flight  Path 


FLIGHT  TIME  (SEC.) 


.0 

50,4 
87,7 
£.917,5  ". 
LI058.8.; 
1052,8 
1064,5 
1281,0  , 
S?.1302,4 
£ 1320,0  •■, 
JU376,5.;i. 


MEAN  IMPACT  POINT 


UTITUDE  (Deg.) 


•54 

34 
^.34 
Sr:AZa 
&i'-35 

35 
•35 
35 

£335 

^35 


,7329  7 
,7923  ; 
,0320,: 
,0514 
,0673 
,3343 
,3737  1 
,4139  /; 
.5209^ 


LONGITUDE  (Deg.) 


' -120 
• 118 
*r*u8 
‘'.—  1 18 
si-ilO 
•118 
-118 

w— 117 
^-117 
is>117 


.5704 

,372a 

• A r>A  ' 

,2747. 

.1687'. 

.1370 

.1149 

,6639 

,6374: 

,6328 

,5978, 


DOWNRANGE 
AZIMUTH 
(Deg. ) 


..•-Wf.C".  ■ 

4 . ■ 

4 . 

25 
.1 
S4.1' 

a.o»a&&£i; 


Table  4-3-IV.  Mean  Impact  Point  Locus  - VAPB  to  NWC  - Alternate  Flight  Path 


FLIGHT  TIME  (SEC.) 


0.0 

-171.6  ^ 
■*.  165,3  ™ 
207  ,'3  7 if 
;■<.  872,4 

a t *•  M . 


MEAN  IMPACT  P0JMT 


UTITUDE  (Deg.) 


•34  ,’4  37  2 
34,6922 
. 9.34,' 6999  t 
&34#7000.;, 
£.34,7000  '< 
. 34,7329 

34,7928 
35,0328 
;»•  35,051 1 ~\ 
r-35,0659 
iv35,3379;u 
35  '3750 
35,4293 
35  ,*529  3 

V5*.  w 


LONGITUDE  (Deg.) 


.•120 
' -120 
*£•120 
St-120 
&.*»i  18 
-110 
-118 
*110 
f^.118 
-VM16 
&?*  117 
•117 
•117 
-117 


,4792 
.1691 
,1330 
.0754 
,3724^ 
,3059 
,2747 
, 1607 
.1367TiV| 
.11-8 
,5747^5 
,5496 
,5494 


7,5484 


DOWNRANGE  AZIMUTH 
(Deg.) 


45.00 
m_4.45e00 

|p?66,0 0 /; 

5t%«-90,00  •*• 
S#90.00  .X2 

53.00 
• 20,40 

20,40 

BRmJos-v? 

*?;*.t5B,oo 

s^i58,oo.:i 

>31,00 

3o00 

3,00 

— ye» . • w 
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Table  4-3-1.  In  obtaining  the  probability  values  of  Table  4-3-1,  it  was 
assumed  that  the  probability  for  a 1-fin  hardover,  1-fin  nulled  or  1-fin 
no  control  failure  was  equally  distributed  among  the  left,  right  and 
vertical  fins.  The  probability  of  occurrence  for  the  loss  of  RF  carrier 
failure  mode  was  computed  based  on  a carrier  reliability  of  0.9999.  The 
probability  of  occurrence  per  second  (failure  rate)  for  each  mode  of 
failure  is  assumed  to  be  constant  over  all  segments  of  flight.  Since 
the  probabilities  of  occurrence  are  based  on  a 1-hour  mission,  the 
failure  rate  for  all  failures  is 


Rate  = iSDIT  = E-6  failures/second 


4. 3. 1.3. 1.3  Impacting  Fragments 

Eight  fragments,  three  of  which  are  considered  to  be  nonhazardous, 
result  from  a recovery  or  termination  of  the  cruise  missile.  The  non- 
hazardous fragments  which  would  not  be  expected  to  cause  significant 
injury  are  the  pilot  chute,  main  chute  and  a .03-pound  lead  slug.  The 
remaining  five  fragments  are  listed  in  Table  4-3-V  together  with  the 
corresponding  weights,  projected  areas  and  casualty  areas. 


Table  4-3-V.  Hazardous  Impacting  Fragments 


1.  'Recovery  Compartment  Cover  with 
Thruster  Pistons  and  Risers 

2.  Aft  Compartment  Cover 

3.  Steel  Piston 

4.  Steel  Piston 

5.  Missile  and  Main  Chute 


WT 

(LBS) 

PROJECTED 
AREA  (Ap) 

CASUALTY 
AREA  (Ac) 

24. 

3.8  FT2 

13.9  FT2 

1.6 

1.1 

8.0 

.08 

Negligible 

3.4 

.08 

Negligible 

3.4 

-- 

41.9 

68.0 

E=96.7 
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The  casualty  area  (Ac)  for  each  fragment  is  computed  using  the  relation 


(21) 


where 


rD  is  the  radius  of  the  area  occupied  by  a person  (assumed  to  1.0 
H feet). 

It  was  assumed  that  the  fragments  do  not  break  up,  bounce  or  scrape  along 
the  ground  upon  impact.  The  total  casualty  area  for  the  fragments  is 
96.7  square  feet. 

4. 3. 1.3. 1.4  Population  Centers  and  Roads 

Tables  4-3-VI  and  4-3-VII  illustrate  the  type  of  data  on  population 
centers  and  roads  near  the  missile  flight  path  which  the  computer 
program  uses. 

4. 3. 1.3. 2  Aircraft  Collision  Hazards  Data 

The  data  used  in  the  computation  of  the  aircraft  collision  hazards  are 
presented  in  the  following  paragraphs. 

4. 3. 1.3. 2.1  Air  Traffic 

The  low  altitude  air  traffic  crossing  the  missile  flight  path  is  pre- 
sented in  Table  4-3-V III.  The  air  traffic  data  are  presented  for  segments 
of  the  flight  path  over  which  the  aircraft  speed,  expected  heading,  al- 
titude distribution,  and  aircraft  frequency  (aircraft/unit/time)  can  be 
assumed  to  be  constant. 

4. 3. 1.3. 2. 2 Vehicle  Dimensions 

The  dimensions  of  the  cruise  missile  and  the  estimated  dimensions  for  a 
typical  general  aviation  aircraft  are  presented  in  Table  4-3-IX. 

4. 3. 1.3. 2. 3 Missile  Parameters 

The  speed  of  the  missile  is  0.7  mach  which,  based  on  an  altitude  of  5000 
feet  ASL,  is  equal  to  768.1  feet/second.  The  missile  altitude  is  assumed 
to  have  a mean  of  5000  feet  AGL  and  a 1-sigma  uncertainty  of  33  feet. 

The  uncertainty  was  based  on  a maximum  altitude  error  in  a terrain 
following  mode  of  100  feet.  The  maximum  error  was  assumed  to  represent 
a 3-sigma  dispersion. 
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Table  4 - 3- VII.  Road  Locati 


ons 


Begin 


.i  .l  N*** 

latitude 

Longitude 

1017 

-i/O.v/h 

i o : t» 

30.66? 

1 01  s 

3«l,  /45 

-a?o.//6 

• O t*J 

3*«.S«S 

-1/0.005 

lOI  3 

)(1(4V« 

-1/0./// 

i M/ 

1 **  J 1 

- 1 1 9.  *>»>o 

•:on 

5*. SIS 

-l/u./js 

« c i / 

30.5/5 

-1/0. 3/5 

i>a  i 5 

So, *65 

-l/O.UKfl 

o»:l« 

3«.7«*0 

-1/0.515  •' 

i*i  «i 

iO.WO 

-119. TVS  ; , 

i •,«? 

|0„ao* 

-119. TVS 

1 >M 

34.«<*P 
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Table  4-3- IX . Vehicle  Dimensions 


MISSILE 

AIRCRAFT 

Length  (ft.) 

18.2 

30 

Width  (Wingspan) 

(ft.) 

8.6 

30 

Height  (Including 

Fins) 

(ft.)  3.5 

10 

4.3.2  Safety  Hazard  Analysis  Program  (SHAZAM) 

4. 3.2.1  Introduction 

The  launching  of  missiles  of  the  Polaris  family  from  the  broad  ocean 
areas  into  target  areas  located  in  the  vicinity  of  island  groups  can 
present  a range  safety  problem  for  inhabited  islands  near  the  line  of 
flight.  Because  previous  computer  programs  for  hazard  evaluation  were 
intended  primarily  for  hazards  in  the  vicinity  of  the  launch  area  or 
those  associated  specifically  with  the  impact  area,  it  has  been  nec- 
essary to  develop  a new  approach  designed  specifically  for  evaluating 
hazards  accompanying  second  stage  flight  malfunctions  of  Polaris  missiles. 
A computer  program  was  structured  to  treat  individually  the  various 
failure  modes  associated  with  the  Polaris  vehicle.  These  include  com- 
binations of  pitch,  yaw  and  roll  associated  with  angular  accelerations 
and  angular  velocities  of  the  malfunctioning  vehicle  as  well  as  specific 
malfunctions  affecting  reentry  body  deployment.  This  report  represents 
a final  version  of  SHAZAM  which  incorporates  numerous  improvements  in 
accuracy  and  utility  over  earlier  versions.  The  range  safety  philosophy 
which  establishes  the  basis  of  the  program  maintains  that  a malfunctioning 
missile  will  be  allowed  to  continue  its  flight  to  burnout  unless  its 
filtered  instantaneous  impact  point  (IIP)  trace  intersects  an  abort 
wall.  In  SHAZAM,  burnout  is  assumed  either  to  occur  at  a specified  time 
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after  malfunction  or  at  the  normal  time  of  burnout  of  the  rocket  motor. 
Upon  abort-wall  impingement,  the  vehicle  is  either  destructed  or  thrust 
terminated,  depending  upon  the  type  of  wall  encountered. 

In  addition  to  evaluating  the  hazards  associated  with  a specific  flight 
test,  SHAZAM  can  be  employed  in  multiple  runs  to  determine  the  appropriate 
abort-wall  geometry  which  will  provide  optimal  protection  to  populated 
islands,  while  giving  a good  missile  a high  probability  of  achieving  its 
mission  without  abort. 

4. 3. 2. 2 Computer  Program  Description 

4. 3. 2. 2.1  Scope 

This  program  is  intended  for  evaluating  the  hazards  associated  with 
flights  of  the  Polaris  missiles  relative  to  malfunctions  which  manifest 
themselves  when  the  missile  is  outside  the  sensible  atmosphere.  The 
hazards  can  result  from  reentry  of  a failed  vehicle  or  from  coimand 
abort  of  a vehicle,  the  IIP  of  which  violated  an  abort  wall.  The  pro- 
gram is  general  enough  in  concept  and  operation  that  it  could  be  used 
for  vehicles  other  than  those  specified  above  with  appropriate  choices 
of  input  parameters. 

The  dimensionality  of  the  program  is  as  follows: 

• Trajectory  points  - 60  trajectory  points  may  be  input,  but  the 
first  N (specified),  trajectory  data  points  input  are  used  only 
for  initializing  the  filter  employed  in  the  abort  logic. 

t Time  blocks  - 15  failure  time  blocks  are  permissible. 

• Failure  modes  - five  distinct  crossrange  failure  modes  are  built 
into  the  program.  Three  correspond  to  angular  acceleration 
type  malfunctions  including  roll -pitch-yaw,  pitch-yaw  and  yaw; 
the  remaining  two  correspond  to  the  angular  velocity  type 
malfunctions,  pitch-yaw  and  yaw.  The  program  also  will  accomo- 
iate  three  distinct  reentry  vehicle  failure  modes. 

• Failure  cases  - ten  crossrange  failure  cases  are  permissible, 

to  be  cdmprlsed  of  any  mix  of  the  above  five  failure  modes.  One 
downrange  failure  mode  accommodates  all  contributors  to  downrange 
failures. 

• Fragments  - 16  fragment  classes  are  allowable  for  command  de- 
struct  of  a vehicle.  Sixteen  fragment  classes  are  also  allowed 
for  a thrust- terminated  vehicle  plus  an  additional  three  for  the 
thrust  termination  ports.  For  reentry  breakup  following  burnout. 
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the  16  fragment  classes  in  the  thrust  termination  list  are 
utilized. 

• Reentry  vehicles  - the  program  can  handle  up  to  three  reentry 
vehicles. 


• 3-sigma  guidance  - 2 points  are  input  to  define  the  3-sigma 
guidance  deviations  from  the  nominal  locus  of  impact  points. 

• Abort  walls  - ten  open  or  closed  abort  walls  may  be  input,  each 
being  defined  by  a maximum  of  ten  points. 

• Population  centers  - a maximum  of  100  locations  can  be  input, 
defined  by  name,  land  area,  population  and  geodetic  coordinates. 

• PAGM  timeblocks  - a maximum  of  20  timeblocks  can  be  input  de- 
fining the  probability  of  abort  of  a good  missile  over  a 
specified  timeblock. 

The  program  provides,  as  output,  the  impact  loci  and  corresponding 
standard  deviations  for  each  failure  mode  of  the  nonaborted  vehicle.  In 
addition  it  provides  the  probability  of  impact  associated  wUh  each 
population  library  location  and  within  a 1-nautical  mile  border  about 
the  location,  and  the  casualty  expectation  based  upon  injury  and  lethality 
criteria. 


5 

if 

i 


Output  options  include  the  following: 

• Printout  of  input  data  without  program  execution. 


• Suppression  of  all  abort  logic. 

9 Specification  of  malfunction  interval  for  no  abort  to  reduce 
program  run  time. 

I Printout  of  point  of  impingement  of  the  filtered  IIP  locus  with 
the  abort  wall  and  associated  fragment  impact  ellipse  parameters 
for  selected  fragments,  walls  or  failure  modes. 

I Card  output  of.  vehic  ie  position  and  ve^city  during  a malfunc- 
tion turn. 


9 Generation  and  printout  of  vehicle  IIP  during  a failure  turn  for- 
specified  malfunction  times  and  failure  modes. 

4. 3, 2. 2. 2 Operational  Instructions 


( ! 


4-3-23 


» 'jft'I.V  ‘v\5f$_«r  . Mj£J  e&t 


4. 3. 2. 2. 2.1  Console/Restoring 

All  options  for  the  program  are  under  programmed  control.  Therefore, 
sense  switches,  indicators  and  other  console  operations  are  not  nec- 


essary.  The 

program  has 

no  restart  capability. 

4. 3. 2. 2. 2. 2 

Magnetic  Tape  Setup 

Logical 

Assignment 

Mode 

Density 

Physical 

Assignment 

Purpose 

5 

BCD 

High 

A2 

System  Input 

6 

BCD 

High 

A3 

System  Output 

*10 

BCD 

High 

A5 

Tape  Option 

13 

BCD 

High 

B5 

Card  Output 

33 

BIN 

High 

B5 

TWRT  Input 

*The  tape  option  applies  only  when  standard  flight  data  which  will  be 
used  with  multiple  runs  is  input  from  a tape.  Abort  wall,  filter  and 
PAGM  aata  are  then  input  as  cards.  The  population  library  may  be  input 
from  cards  as  an  option. 

4. 3.2. 2. 3 Sequence  of  Operations 

The  process  of  generating  hazards  due  to  failed  or  aborted  vehicles  is 
performed  by  the  computer  program  through  the  following  series  of 
sequential  steps: 

1.  Input  data  is  loaded,  subjected  to  any  necessary  transformations 
and  then  output. 

2.  The  filter  which  simulates  the  tracking  radar  data -smoothing 
filter  is  initialized  by  the  first  N trajectory  points  as  determined  by 
linear  interpolation  between  these  input  points,  where  N is  specified  on 
input. 


3.  A failure  mode  is  selected  and  a mean  malfunction  turn  is 
started. 


4.  Impact  points  are  generated  from  the  filtered  data  of  the  mean 
malfunction  turn.  The  mirror  images  of  the  impact  points  are  created  on 
both  sides  of  the  nominal  vacuum  IIP. 

5.  If  no  abort  wall  is  intercepted  by  the  filtered  impact  locus, 
a mean  vehicle  burnout  impact  point  is  generated  at  approximately 
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1-second  intervals  in  time  of  malfunction.  A 1-sigma  burnout  impact  point 
is  also  generated  for  the  purpose  of  determining  the  standard  deviation 
about  the  mean  burnout  impact  point.  The  time  of  malfunction  is  then 
incremented  in  preparation  for  the  next  malfunction  turn. 

6.  If  an  a abort  wall  is  intercepted  by  the  filtered  locus,  the 
subsequent  search  for  intercept  is  limited  to  that  side  of  the  nominal 
IIP  and  steps  7 through  12  apply.  For  a yaw-pitch-roll  failure,  the 
standard  deviation  is  Dased  upon  burnout  time  standard  deviation.  For 
other  failures  it  is  based  upon  standard  deviation  in  yaw  rate  or 
acceleration. 

7.  The  time  of  malfunction, corresponding  to  first  intercept  of 
that  wall,  is  saved. 

8.  A malfunction  turn  vacuum  IIP  is  generated,  based  upon  the  time 
of  wall  interception  by  the  filtered  locus  plus  the  abort  reaction  time. 

9.  A second  impact  point  is  generated  by  incrementing  the  tra- 
jectory by  an  additional  time  interval  equal  to  the  computer  cycle  delay 
time.  The  midpoint  between  the  two  impact  points  along  with  other 
impact  ellipse  parameters  are  determined. 

10.  Malfunction  time  is  incremented  and  another  abort  wall  impact 
point  is  generated.  This  process  is  repeated  until  either  the  filtered 
impact  locus  moves  beyond  the  abort  wall,  or  some  point  on  the  filtered 
locus  is  found  to  be  downrange  of  the  most  uprange  point  defining  the 
next  adjacent  abort  wall  on  the  same  side  of  the  nominal  IIP.  If  the 
latter  situation  occurs,  a search  by  the  filtered  locus  is  immediately 
initiated  for  this  adjacent  wall  as  well  as  the  primary  wall.  If  the 
adjacent  wall  is  intercepted,  the  search  for  the  primary  wall  is  term- 
inated. If  the  adjacent  wall  is  not  intercepted, the  search  continues 
for  the  primary  wall  until  the  filtered  locus  can  no  longer  reach  that 
wall.  In  either  case  the  last  malfunction  time  is  saved. 

11.  The  hazards  associated  with  that  abort  wall  for  the  selected 
failure  mode  are  assessed  by  development  of  a composite  1 -sigma  impact 
ellipse  for  each  malfunction  time  and  each  fragment  which  incorporates 
radar  tracking  uncertainty,  guidance  standard  deviation,  computer  cycle 
time  delay  and  fragment  dispersion.  If  the  abort  wall  is  designated  as 
a thrust  termination  wall,  an  additional  ellipse  is  generated  for  thrust 
termination  port  fragments.  The  ellipse  centers  are  next  corrected  to 
account  for  atmospheric  drag  effects.  Adjacent,  overlapping  ellipses 
form  a hazard  band  associated  with  that  abort  wall.  Hazards  are  then 
evaluated  for  locations  near  these  ellipses. 
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12.  Locations  are  checked  to  determine  If  they  He  within  the  area 
protected  from  no-abort  failures  by  the  abort  wall.  If  so,  they  are 
appropriately  tagged  as  protected  locations. 

13.  The  program  now  returns  to  the  malfunction  time  corresponding 
to  first  intercept  of  the  abort  wall  and  proceeds  to  search  on  the 
opposite  side  of  the  nominal  IIP  for  intercept  of  another  abort  wall 
until  the  time  of  malfunction  corresponding  to  first  miss  of  the  previ- 
ous abort  wall  Is  reached.  From  that  point  a simultaneous  search  for 
abort  walls  on  either  side  of  nominal  Is  initiated. 

14.  The  process  outlined  in  steps  4 through  13  is  repeated  until 
the  time  of  malfunction  reaches  the  time  of  fuel  depletion.- 

15.  The  hazards  associated  with  the  burnout  impact  loci  are  then 
evaluated.  The  magnitude  of  such  hazards  to  locations  which  are  pro- 
tected by  the  abort  walls  Is  reduced  by  the  probability  of  a successful 
abort.  These  hazards  are  added  to  those  generated  from  the  abort  ellipses. 
The  program  then  returns  to  the  nominal  trajectory  point  corresponding 

to  the  first  malfunction  turn. 

16.  The  program  selects  the  next  failure  mode  and  initiates  a mal- 
function turn,  proceeding  as  in  steps  3 through  13.  The  hazards  pro- 
duced by  this  failure  mode  are  summed  with  those  produced  by  previous 
failure  modes  taking  into  account  the  failure  mode  occurrence  proba- 
bility. This  process  is  continued  until  all  failure  modes  have  been 
considered. 

17.  The  hazards  associated  with  downrange  failures  and  abort  of  a 
good  missile  are  evaluated  and  added  to  the  other  hazard  contributions. 

18.  Finally  the  hazards  associated  with  reentry  vehicles  and  Impact 
of  the  second  stage  are  included  in  the  summation. 

19.  The  program  outputs  not  only  the  impact  probabilities  and 
casualty  expectations,  but  also  the  points  of  filtered  locus  - abort 
wall  intersection,  the  impact  ellipses  for  selected  abort  walls,  failure 
modes  and  fragments,  and  the  burnout  impact  loci  and  standard  deviations. 
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4.4  SPACE  AND  MISSILE  TEST  CENTER  (SAMTEC) 

4.4.1  Launch  Area  Risk  Analysis 

The  SAMTEC  launch  and  near  launch  areas  at  Vandenberg  AFB  are  so  sit- 
uated that  many  risk  assessment  considerations  associated  with  the 
launch  of  a missile  or  space  booste“  must  be  undertaken.  Local  towns  of 
Santa  Maria,  Lompoc,  Vandenberg  Village  and  Mission  Hills  in  addition  to 
on-base  population  and  major  population  centers  such  as  Los  Angeles  and 
San  Diego  are  potential  risk  centers.  Extending  almost  the  entire 
length  of  Vandenberg  AFB  is  the  Southern  Pacific  Railroad.  Th'.s  major 
rail  transportation  system, as  well  as  sea  traffic  lanes  less  than  30 
miles  offshore,  and  nearby  air  traffic  lanes  are  additional' risk  centers. 

With  the  number  and  variety  of  missile  launches  from  SAMTEC  and  the 
large  number  of  potential  risk  centers  influenced  by  these  launches,  a 
risk  assessment  model  which  evaluates  missile  performance  factors  against 
these  risk  centers  is  required.  Under  contract  with  the  J.  H.  Wiggins  Corp., 
SAMTEC  has  developed  the  Launch  Risk  Analysis  (LARA)  program  - a compre- 
hensive, computerized  missile  launch  risk  assessment  model.  The  following 
discussion  of  the  LARA  program  is  taken  from  a paper  presented  to  the 
Proceedings  1977  Annual  Reliabilty  and  Maintainability  Symposium  by 
representatives  of  J.  H.  Wiggins  Corp. 

The  basic  requirements  of  a launch  risk  analysis  are:  (1)  define  the 
impact  probability  distributions  for  impacting  vehicle  debris  which 
account  for  all  significant  -sources  of  impact  uncertainty,  (2)  compute 
the  corresponding  probabilities  of  one  or  more  fragments  impacting 
specified  critical  center.;  (land  areas,  generally  populated)  and  the 
expectation  of  casualties  for  each  center.  The  concept  is  illustrated 
in  Figure  4-4-1. 
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To  properly  describe  the  problem  and  solution,  it  is  necessary  to  define 
the  basic  factors  which  must  be  contemplated.  They  are: 

1.  All  significant  events  which  can  result  in  the  impact  of  launch 
vehicle  debris  must  be  considered.  This  includes  the  normal  jettisoning 
of  hardware  such  as  depleted  motor  cases  and  all  modes  of  vehicle  failure 
which  will  result  in  the  abnormal  impact  of  vehicle  debris.  The  basic 
vehicle  failure  modes  which  are  considered  are  malfunction  turns  and 
premature  thrust  termination.  Malfunction  turns  cover  all  abnormal 
vehicle  turns  from  a gradual  turn  off  course  to  a tumble  turn. 

2.  The  vehicle  dynamic  behavior  following  a malfunction  turn 
failure  must  be  assessed  to  statistically  define  the  resulting  per- 
turbation in  the  vehicle  state  vector  from  the  time  of  failure  to  the 
time  when  steady  state  conditions  are  reached  or  the  vehicle  breaks 
apart.  This  analysis  must  Include  the  effect  of  a flight  termination 
system  (FTS),  if  one  is  employed. 

3.  The  fragments  resulting  t»om  the  breakup  of  a vehicle  must  be 
defined  and  accounted  for.  Breakup  may  result  from  the  activation  of  an 
FTS  or  may  be  due  to  excessive  airloads. 

4.  The  Impact  distribution  for  each  fragment  must  include  the 
effects  of  initial  state  vector  uncertainty  and  the  effects  of  the 
atmosphere  on  the  fragment  during  free  fall.  State  vector  uncertainty 
results  from  normal  vehicle  guidance  and  control  uncertainties,  malfunction 
turn  dynamics  and  destruct- Induced  fragment -velocity  perturbations. 

5.  The  lethality  of  each  impacting  fragment  must  be  defined  in 
terms  of  the  size  of  the  land  area  endangered  by  the  fragment  and  the 
ability  of  the  fragment  to  penetrate  different  classes  of  structures. 

6.  All  endangered  critical  centers  must  be  defined  in  terms  of 
their  location,  size  and  population.  The  population  must  be  distributed 
according  to  various  levels  of  sheltering. 

Tho  launch  risk  analysis  is  accomplished  by  segmenting  the  vehicle 
trajectory  into  short  time  Intervals.  Hazards  for  each  time  interval 
are  computed  for  each  mode  of  failure  assuming  the  failure  occurred  at  a 
single  representative  time  point  within  the  Interval.  The  results  are 
weighted  according  to  the  probabll'ty  that  the  particular  failure  mode 
will  occur  during  the  time  Interval.  The  procedure  Is  delineated  in  the 
flow  diagram.  Figure  4-4-2.  Successive  failure  times  are  spaced  suffi- 
ciently close  so  that  the  successive  impact  distributions  for  each 
impacting  fragment  overlap  sufficiently  to  simulate  the  actual  contin- 
uous distribution. 
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Figure  4-4-2.  Launch  Risk  Analysis  Procedure 


One  of  the  primary  requirements  of  a launch  risk  analysis  is  the  com- 
putation of  fragment  impact  data  as  a function  of  flight  time.  The 
impact  data  for  a fragment  are  the  coordinates  (latitude  and  longitude) 
of  the  nominal  impact  point  together  with  data  required  in  the  analysis 
of  fragment  lethality  (time  of  fragment  free  fall,  impact  velocity  com- 
ponents, decrease  in  the  size  of  a burning  solid  propellant  fragment 
durinq  free  fall).  The  nominal  impact  point  for  a fragment  is  defined 
as  the  impact  point  corresponding  to  an  initial  state  vector  of  the  l 

vehicle  at  the  time  of  .a  failure.  The  mean  impact  point  for  a fragment  | 

is  computed  from  the  nominal  point  by  applying  the  mean  perturbations  \ 

resulting  from  the  various  sources  of  impact  uncertainty.  j 

Since  data  are  required  for  a very  large  number  of  impacting  fragments 
(each  fragment,  failure  mode  and  failure  time  combination),  it  is  nec- 
essary to  employ  a rapid  and  accurate  technique  for  computing  these 
data.  If  the  impact  data  were  computed  for  each  impact  by  numerically 
tntegratfng  the  impact  trajectory,  the  computation  time  would  become 
excessive.  To  overcome  this  problem  an  interpolation  technique  was 
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developed  which  greatly  reduces  the  required  number  of  Integrated  Impact 
computations.  Integrated  Impact  data  are  computed  for  a set  of  appropri- 
ately spaced  vehicle  flight  times  and  fragment  ballistic  coefficients 
(e).  The  Impact  data  for  any  particular  failure  time  and  fragment 
(defined  by  Its  6 value)  are  obtained  by  first  Interpolating  versus 
flight  time,  followed  by  an  interpolation  versus  e.  Simple  linear 
interpolations  can  be  used  for  the  fragment  lethality  data  item  while 
cubic  interpolations  are  required  for  the  impact  coordinates. 

In  addition  to  the  computation  of  nominal  Impact  data,  a method  is 
required  to  predict  fragment  Impact  points  corresponding  to  relatively 
small  perturbations  In  Initial  state  vector,  or  equivalently,  to  per- 
turbations In  the  vacuum  Impact  point.  To  accomplish  this,  the  concept 
of  the  "debris  centerline"  is  used.  The  debris  centerline  (different 
versions  of  which  are  given  in  references  1 and  2)  Is  defined  as  the 
locus  of  Impact  points  for  fragments  having  varying  ballistic  coefficients 
which  correspond  to  a specified  Initial  state  vector.  What  is  required 
is  a transformation  from  a known  centerline,  such  as  the  centerline  de- 
fined by  the  nominal  Impact  points,  to  the  perturbed  centerline  correspond- 
ing to  a perturbed  vacuum  Impact  point.  The  required  transformation  is 
depicted  in  Figure  4-4-3. 


Figure  4-4-3.  Centerline  Transformation 


The  X'  - <t>'  coordinate  system  Is  an  east-north  system  originating  at  the 
sub-vehicle  point  (grounj  projected  position  of  the  vehicle  at  the  time 
of  failure)  when 

X1  = (X  - \SUB)  cos  4>sub  (1) 


♦'  s *SUF<  (2) 
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x,  <j>  are  the  longitude  and  latitude  of  impact  and  x SUB,  <j>  SUB  are  the 
longitude  and  latitude  of  the  sub-vehicle  point.  The  xy  coordinate 
system  is  defined  by  the  "effective  wind  direction"  which  is  defined  as 
the  direction  from  the  sub-vehicle  point  to  the  impact  point  for  a 
fragment  which  becomes  immediately  embedded  in  the  wind,  i.e.,  a fragment 
having  a very  low  ballistic  coefficient.  The  direction  Is  defined  by 
its  azimuth  angle,  y.  The  y axis  is  oriented  along  the  effective  wind 
di»"ect1on,  and  the  x axis  is  90°  clockwise  from  y.  The  transformation 
from  the  x'  - 41  system  to  the  x-y  system  is 

x = x‘  cos  i}i  - #rsin  4>  (3) 


y » x'  sin  + cos  ^ 


(4) 


The  empirical  centerline  transfomatlon  relations  are 

cos  * - xv  sin  ♦)  xlp 
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+ xiv  sin  yle 
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t(yv  - yiv> cos  * ‘ xv sin  xi 8 (6) 

+ xlv  cos  <p  yleJ 


Thus,  given  the  vacuum  and  fragment  impact  points  for  a reference  initial 
condition  and  the  vacuum  impact  point  for  a perturbed  initial  condition, 
the  perturbed  impact  point  for  any  fragment  can  be  predicted.  The 
transformation  provides  sufficient  accuracy  whenever  the  nominal  center- 
line  is  well  defined. 


Fragment  impact  uncertainties  come  from  four  basic  sources:  (1)  uncertainty 
in  the  vehicle  state  vector  at  vehicle  breakup  or  destruct,  (2)  uncertainty 
in  any  destruct  velocity  imparted  to  the  fragment  by  a destruct  system, 

(3)  uncertainty  .in  the  atmospheric  environment  during  free  fall,  and 

(4)  uncertainty  in  the’ fragment  aerodynamic  lift  and  drag.  The  models 
associated  with  these  uncertainties  are  presented  in  the  following 
paragraphs.  Since  the  sources  of  uncertainty  are  independent,  e.g., 
wind  uncertainty  Is  Independent  of  explosion  velocity  uncertainty,  the 
effects  of  each  uncertainty  source  are  developsd  separately  and  then 
combined  to  produce  the  total  impact  uncertainties. 


4. 4. 1.1  Vehicle  State  Vector  Uncertainty 

The  vehicle  state  vector  uncertainty  contribution  to  the  Impact  dis- 
tribution Is  developed  based  on  the  assumption  that  the  perturbations  in 
fragment  impact  points  caused  by  variations  in  initial  velocity  (from 
the  expected  velocity)  can  be  linearly  related.  Since  the  impacts  will 
be  assumed  to  be  normally  distributed,  the  probability  distributions  are 
fully  characterized  by  the  first  two  moments.  The  impact  covariance 
(defining  the  impact  uncertainties)  is  calculated  as  shown  in  equation  7. 


Position  uncertainty  can  be  ignored  because  of  the  relatively  small 
influence  compared  to  velocity  uncertainty.  The  mean  perturbation  in 
the  fragment  Impact  point  Is  obtained  from  the  mean  initial  velocity 
perturbations  [SV]  as  shown  in  equation  8. 


where 

D,C  = downrange  and  crossrange  impact  coordinates 

Vi,  V2,  V,  = velocity  components  in  a Cartesian  coordinate  system 

[zDc]  = impact  covariance  matrix 

| = initial  velocity  covariance  matrix 

The  partial  derivatives  (referred  to  as  miss  coefficients)  can  be  com- 
puted by  perturbing  the  ballistic  equations  for  a vacuum  trajectory, 
these  vacuum  miss  coefficients  are  then  scaled  to  account  for  the  effect 
of  drag  on  an  object.  The  scaling  coefficients  are  determined  using  the 
centerline  transformation  relations  (equations  5 and  6). 

The  first  source  of  initial  velocity  uncertainty  to  be  considered  is 
that  due  to  guidance  and  performance  variations  of  the  vehicle.  Fre- 
quently the  effects  of  these  variations  are  specified  directly  in  terms 
of  vacuum  Impact  uncertainties.  If  these  variations  are  defined  In 
terms  of  uncertainties  In  the  vehicle  velocity  vector,  the  uncertainties 
can  be  transferred  to  Impact  uncertainties  using  equation  7. 
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The  most  significant  source  of  vehicle  velocity  uncertainty  is  the  mal- 
function turn  behavior  of  the  vehicle.  The  turn  can  range  from  a gradual 
turn  to  a tumbling  turn  depending  upon  the  effective  angle  of  the  thrust 
vector  relative  to  the  vehicle  axis.  The  orientation  of  the  tumble 
plane  is  assumed  to  be  completely  random  and  the  angle  of  the  thrust 
vector  misalignment  can  be  expressed  in  terms  of  a probability  density 
function  (PDF)  ranging  from  zero  to  a specified  maximum  for  the 
particular  gimbal  system.  The  entire  procedure  for  the  development  of 
the  malfunction  turn  impact  PDF  is  shown  in  Figure  4-4-4. 

The  procedure  accounts  for  the  violations  of  destruct  lines  which  modify 
the  basic  impact  dispersions  due  to  flight  termination  (abort).  Figure 
4-4-5  shows  an  ellipse  representing  the  impact  uncertainty  of  the 
vacuum  impact  point  of  d missile  due  to  vehicle  initial  velocity  uncertain 
ties  (including  the  guidance  and  performance  contribution).  Normal  range 
safety  practice  uses  a real-time  vacuum  instantaneous  impact  point  (VHP) 
to  determine  whether  a missile  is  malfunctioning.  If  this  VHP  crosses 
a destruct  boundary  the  missile  is  destroyed.  The  impact  distribution 
as  shown  indicates  that  there  is  a probability  that  the  VIIP  will  violate 
the  destruct  bounds.  By  integrating  the. PDF  over  the  regions  defined  by 
the  destruct  bounds  (Regions  I,  II  and  III),  the  probability  of  no 
destruct  bound  violation  and  the  probability  of  violation  for  each 
destruct  bound  are  computed.  Three  corresponding  modes  of  failure  are 
defined  as  fellows: 

• Left  Mode  (Region  I):  Vehicle  VIIP  violates  the  left  destruct 

bound. 

• Right  Mode  (Region  II):  Vehicle  VIIP  violates  the  right  destruct 

bound. 


• Center  Mode  (Region  III):  No  destruct  line  violation  occurs. 

New  vacuum  impact  means  and  uncertainties  are  computed  for  each  of  the 
three  modes.  For  the  center  mode  these  are  computed  by  integrating  the 
original  distribution  over  Region  III.  The  mean  and  uncertainties  for 
the  left  and  right  modes  are  developed  based  on  the  distribution  of  the 
VIIP  position  as  it  crosses  a destruct  line  (defined  by  the  intersection 
of  the  destruct  Vine  with  the  original  impact  distribution),  the  expected 
velocity  of  the  IIP  as  it  crosses  the  destruct  line,  and  the  mean  uncer- 
tainty for  the  time  delay  between  destruct  line  violation  and  actual 
vehicle  destruct. 

The  impact  distributions  for  fragments  for  each  of  the  modes  are  obtained 
from  the  vacuum  distributions  using  the  centerline  transformation  rela- 
tions to  relate  vacuum  Impact  perturbations  to  fragment  impact  perturbations. 
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Figure  4-4-4.  Development  of  the  Malfunction  Turn  Impact  Distributions 
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Figure  4-4-5.  Malfunction  Turn  Vacuum  IIP  Distribution 


4. 4. 1.2  Destruct  Induced  Velocity 

Most  launch  vehicles  have  a system  which  will  halt  powered  flight  upon 
command  of  a range  safety  controller.  Typical  destruct  systems  cut  open 
the  casing  of  the  vehicle  to  relieve  chamber  pressure  and  halt  thrust. 

This  is  done  by  explosive  charges  which  usually  produce  a conflagration 
of  flying  propellant  and  vehicle  fragments.  The  fragment  velocities  are 
estimated  based  on  ground  tests  and  flight  experience  and  expressed  in 
terms  of  a velocity  covariance.  The  velocity  covariance  for  each  fragment 
is  transformed  to  an  impact  covariance  as  In  equation  7. 

4. 4. 1.3  Wind  Uncertainty 

The  winds  through  which  fragments  fall  can  be  approximated  by  a profile 
of  winds,  piecewise  linear  in  altitude  and  direction,  blowing  horizontally. 
Statistical  models  of  wind  can  be  developed  by  selecting  a set  of  al- 
titudes and  establishing  mean  values  for  the  wind  velocity  components  at 
these  altitudes.  Wind  uncertainties  can  be  described  by  a covariance 
for  the  wind  components  for  all  altitudes.  The  wind  uncertainty  is 
derived  from  several  sources  including  variability  in  wind  measurement 
and  change  in  the  wind  from  the  time  of  measurement  to  the  time  of 
launch. 

The  effect  of  wind  uncertainty  on  fragment  impact  points  can  be  determined 
by  computing  influence  coefficients  relating  horizontal  translation  in  a 
wind  field  - between  two  altitude  levels  - to  wind  velocity  components. 

The  influence  coefficients  are  computed  based  on  a fragment  having  a 
ballistic  coefficient  of  1 psf  and  falling  embedded  in  the  wind  at 
terminal  vertical  velocity.  The  impact  dispersions  are  found  to  approxi- 
mately vary  inversely  with  ballistic  coefficient.  The  impact  covariance 
for  a fragment  having  ballistic  coefficient  $ is  thus  computed  as  follows: 


('» 
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where 


[2'w]  is  the  impact  covariance  matrix  due  to  wind, 
[C]  is  the  matrix  of  influence  coefficients,  and 
l UJ  is  the  wind  covariance  matrix. 


4. 4. 1.4  Fragment  Ballistic  Coefficient  Uncertainty 

The  ballistic  coefficient  (3  = W/CD^)  of  a particular  fragment  is  diff- 
icult to  predict  because  of  the  uncertainties  in  weight  (W)-,  drag  coeff- 
icient (CD)  and  cross-sectional  area  (A).  The  effect  of  these  uncertain- 
ties is  to  produce  a curvilinear  monovariate  fragment  impact  uncertainty 
along  debris  centerline.  This  dispersion  may  be  adequately  characterized 
by  the  impact  points  associated  with  the  lower  bound,  the  mean  and  the 
upper  bound  estimates  of  the  fragment  e.  The  impact  distribution  is 
approximated  by  a bivariate  normal  distribution  "fitted"  to  these  three 
fragment  impact  points. 

4. 4. 1.5  Fragment  Lift  Effects 

Another  source  of  fragment  impact  point  uncertainty  is  aerodynamic  lift. 

A spherically  shaped  object  will  fall  without  any  lift  effect,  but 
irregular  shaped,  tumbling  objects  will  have  random  lift  vectors.  It 
has  been  established  that  for  initial  altitudes  up  to  about  60,000  feet, 
the  la  impact  dispersion  due  to  lift  (ai)  is  approximately  proportional 
to  the  initial  fragment  height.  The  proportionality  constant  ranges 
from  0.01  for  blunt  objects  to  0.05  for  flat  panel-like  objects.  The 
impact  dispersion  does  not  increase  appreciably  for  altitudes  greater 
than  60,000  feet.  Since  the  dispersion  due  to  lift  is  random  in  direction, 
the  impact  covariance  matrix  becomes 


N 


On  0 


0 0, 


The  total  impact  uncertainties  for  a given  fragment  due  to  a given  mode 
of  failure  occuring  at  a particular  flight  time  are  obtained  by  combining 
the  uncertainties  resulting  from  the  various  error  sources.  This  Is 
done  by  expressing  the  impact  covariance  matrices  for  all  error  sources 
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in  a common  orthogonal  reference  coordinate  system  and  summing  them. 
The  resulting  covariance  matrix  Is  of  the  form 


(11) 


Based  on  the  central  limit  theorem,  the  impact  PDF  is  assumed  to  be 
bivariate  normal,  giving  a PDF  as  follows: 


p<^>  ■ si^pr  exp(’s{HTM  ®)  os) 

This  PDF  is  centered  at  the  mean  impact  point  for  the  fragment  computed 
by  shifting  the  nominal  fragment  impact  point  by  the  sum  of  the  mean 
Impact  perturbations  resulting  from  the  impact  error  sources.  The  con- 
ditional probability  of  impact  for  the  given  fragment  on  a given  critical 
center,  given  that  the  failure  has  occurred,  is  computed  by  integrating 
the  PDF  over  the  critical  center  land  area. 


The  probability  of  one  or  more  of  the  fragments,  resulting  from  the 
given  failure  mode,  impacting  on  the  critical  center  is  given  by 


P 

n 


= 1 


(13) 


where 

n is  the  number  of  fragments  and 

Pj  Is  the  conditional  probability  of  Impact  for  the  1th  fragment. 

The  probability  of  one  or  more  impacts  is  weighted  according  to  the 
probability  of  occurrence  of  the  failure  mode  during  the  time  Interval. 
The  total  probability  of  impact  for  a given  crlltcal  center  is  obtained 
by  summing  the  weighted  probabilities  of  one  or  more  impacts  over  all 
modes  of  failure  and  over  all  failure  time  intervals. 


| Before  proceeding  to  the  computation  of  casualty  expectation,  it  is 

| necessary  to  define  the  various,  categories  of  impacting  fragments  and 

If  the  lethality  of  these  fragments  to  persons  in  various  levels  of  sheltering. 


4. 4. 1.6  Fragment  Categories 

Impacting  launch  vehicle  fragments  are  divided  into  the  following  categor- 
ies: inert  pieces  of  vehicle  structure,  pieces  of  solid  propellant 
(solid  or  liquid)  which  are  non-explosive,  and  fragments  which  contain 
propellant  and  which  can  explode  upon  impact.  Definition  of  the  fragments 
(which  will  result  from  each  type  of  vehicle  failure  are  model  inputs. 

The  fragment  list  may  vary  for  different  segments  of  flight,  such  as  for 
each  stage  of  flight.  For  fragments  which  consist  of  or  contain  propel- 
lant, and  which  originate  from  a current  operating  booster  motor,  the 
size  and  weight  of  the  fragment  at  vehicle  breakup  are  adjusted  according 
to  the  propellant  consumed  by  normal  operation  prior  to  the  failure. 

Tor  fragments  consisting  of  or  containing  burning  propellant  during  free 
fall,  the  amount  of  propellant  consumed  prior  to  impact  must  be  computed. 
For  contained  propellant  the  weight  of  propellant  consumed  is  computed 
as  the  product  of  a specified  consumption  rate  (pounds/second)  and  the 
time  of  free  fall.  For  uncontained  solid  propellant  fragments,  the 
amount  of  propellant  consumed  is  computed  based  on  specified  burn  rate 
versus  atmospheric  pressure  (P)  relations  of  the  form 

dr  /in®  fee  t 

= AP  ' seconT"  (14) 

where 

dr/dt  is  the  linear  rate  of  burn  and 

A and  B are  constants  dependent  on  the  propellant  type. 

The  propellant  consumption  for  each  propellant  type  is  computed  as  part 
of  the  impact  data  for  fragments. 

4. 4. 1.7  Casualty  Area 

The  casualty  area  of  an  impacting  fragment  is  defined  to  be  the  surface 
area  about  the  fragment  Impact  point  within  which  a person  would  become 
a casualty.  The  point  location  of  both  the  fragment  and  a person  are 
defined  by  their  respective  centroids.  Casualties  may  result  from  a 
direct  hit,  from  a bouncing  fragment,  from  a collapsing  structure  re- 
sulting from  an  impact  on  a building  or  other  shelter,  or  from  the  over- 
pressure pulse  created  by  an  explosive  fragment. 

Consider  first  the  casualty  area  of  a non-explosive  fragment  falling 
vertically  and  Impacting  in  the  open.  Let  the  projected  area  of  the 
fragment  be  A and  approximate  the  area  occupied  by  a person  as  a circle 
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of  radius  r_.  Assuming  a circular  fragment  projected  area,  the  fragment 
casualty  area  is  giver*  by  the  relation 


(15) 


Since  some  impacting  fragments  would  not  be  expected  to  cause  signif- 
icant Injury  due  to  low  impact  velocity  and/or  low  fragment  weight,  the 
casualty  area  may  be  reset  to  zero  for  these  fragments.  The  impact 
kinetic  energy  can  be  used  as  a criterion  to  determine  whether  the  frag- 
ment would  be  expected  to  cause  injury.  Threshold  kinetic  energy  values 
from  35  to  50  ft-lb  have  been  used. 

The  basic  casualty  area  expressed  above  should  be  modified  to  account 
for  bouncing  or  scraping  upon  impact  and  for  the  effect  of  any  horizontal 
component  of  impact  velocity.  The  effect  of  a horizontal  velocity  com- 
ponent is  to  increase  the  hazarded  area  due  to  the  horizontal  travel  of 
the  fragment  while  falling  from  the  height  at  which  a person  could  first 
be  struck. 


The  casualty  area  for  a fragment  which  explodes  upon  impact  is  made  up 
of  two  components  as  follows:  (1)  the  overpressure  zone  created  by  the 
explosion,  and  (2)  the  casualty  areas  of  propellant  and  hardware  fragments 
thrown  out  by  the  explosion  which  impact  outside  of  the  overpressure 
zone.  The  casualty  area  contribution  resulting  from  the  fragments 
thrown  out  by  the  explosion  is  generally  insignificant  relative  to  the 
overpressure  zone  contribution  and  can  be  ignored.  The  casualty  area 
due  to  the  overpressure  zone  is  determined  by  the  minimum  overpressure 
level  which  would  be  injurious  to  a person.  The  casualty  area  is  the 
area  of  the  circle  whose  radius  is  equal  to  the  distance  from  the  explosion 
at  which  the  overpressure  level  has  dropped  to  the  specified  level. 

This  radius  (r0)  is  given  by  the  Kingery-BRL  equation  (reference  3). 
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where 

fWp  is  the  weight  of  TNT  which  will  generate  an  equivalent  explosion, 

Wp  is  the  weight  of  propellant  contained  in  the  fragment  at 
Y Impact, 

K is  a factor  obtained  from  the  Kingery-BRL  chart  (a  function 
0 of  the  specified  overpressure  level). 
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Thus  far  the  casualty  area  computations  have  not  accounted  for  the 
sheltering  provided  to  persons  located  In  structures.  To  do  this,  all 
sheltering  Is  classified  Into  predefined  levels.  It  is  assumed  that  the 
population  of  each  critical  center  can  be  divided  into  the  expected 
number  of  people  who  are  unprotected  and  the  number  who  are  protected  by 
each  level  of  sheltering.  People  who  are  located  on  the  lower  floor(s) 
of  buildings  may  be  classified  into  higher  levels  of  sheltering  than 
those  located  on  the  upper  floor(s).  For  non-explosive  fragments,  the 
casualty  area  to  shelterd  persons  is  computed  as  follows: 


KP  A 
P c 


Where 


Is  the  casualty  of  the  fragment  to  unprotected  persons 
(falling  vertically  and  without  bounce). 


is  a factor  to  account  for  the  increase  in  the  casualty  area 
due  to  collapsing  structure,  and 


is  the  probability  that  the  fragment  will  penetrate  the  structure. 


The  penetration  probability  (Pp)  is  based  on  the  impact  kinetic  energy 
of  the  fragment  and  on  the  bounding  values  for  the  kinetic  energy  re- 
quired to  penetrate  the  structure. 


The  effect  of  sheltering  on  the  casualty  area  for  explosive  fragments  Is 
accounted  for  by  changing  the  minimum  overpressure  level  upon  which  the 
overpressure  zone  is  based.  The  overpressure  level  used  is  that  which 
would  be  expected  to  severely  damage  or  collapse  the  sheltering  structure. 


The  casualty  expectation  for  a given  critical  center  is  the  number  of 
injuries  or  deaths  expected  to  result  within  that  center  from  a launch. 
To  compute  the  casualty  expectation  for  a center  due  to  a given  failure 
mode  and  flight  time  interval,  consider  the  center  as  being  segmented 
into  sub-areas  (Aj)  within  which  the  population  is  afforded  a constant 
level  of  sheltering. 


Let  Pi. 


Probability  of  a given  fragment  impacting  into  sub- 
area  A}  (weighted  by  the  probability  of  the  failure 
mode  occurring  during  the  time  interval) 


Casualty  area  of  the  fragment  for  the  shelter  level 
of  A^ 


= Number  of  people  in 
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The  casualty  expectation  for  sub-area  Aj  is  the  probabllty  of  the  frag- 
ment impacting  in  A-j  times  the  expected  number  of  casualties  given 
impact.  Assuming  that  the  population  In  A^  is  uniformly  distributed, 
the  casualty  expectation  (references  4 and  5)  is  given  by 


:ci 


= P, 


ci 


^7 


(18) 


For  the  critical  center  sufficiently  small  so  that  the  fragment  impact 
probability  density  over  the  land  area  (A)  is  reasonably  uniform,  the 
casualty  expectation  becomes 


c. 


= Pr 


c . 
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where 

P,  is  the  probability  of  the  fragment  impacting  anywhere  on  the 
center. 

The  casualty  expectation  for  the  entire  critical  center  is  obtained  by 
summing  the  Ec^  over  all  sub-areas.  The  total  casualty  expectation  for 

the  center  is  obtained  by  summing  the  individual  Ec  over  all  fragments, 
failure  modes  and  flight  times. 

The  risk  assessment  model  has  been  implemented  on  an  IBM  360/65  computer 
system  at  SAMTEC. 

4.4.2  Target  Planning  Optimization/Countour  Plot 

The  Target  Optimization  Program  (TARGOP)  and  its  associate  Contour  Plot 
Program  (CONTUR)  are  designed  to  produce  Information  which  can  be  used 
to  select  the  best  test  missile  target  point  in  the  sense  of  minimizing 
risk  to  life  and -property  in  the  greater  target  area.  These  programs 
were  developed  by  the  J.  H.  Wiggins  Corp.  under  the  direction  of  SAMTEC/SEY. 

Given  a description  of  the  pieces  expected  to  impact  and  the  associated 
impact  uncertainty,  the  program  combines  such  data  with  information 
about  the  critical  centers  (usually  populated  areas)  in  the  target 
region  to  compute  impact  probability  (Pt),  unsheltered  casualty  expecta- 
tion ( Ecu ) , sheltered  casualty  expectation  (£cs),  and  balanced  risk  (R(0* 
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The  quantities  are  computed  in  such  a way  that  the  threat  of  a partic- 
ular impacting  object  to  a particular  center  is  obtained  for  all  centers. 
Total  probabilities  are  also  computed  which  represent  the  total  risk 
from  all  of  the  impacting  objects  to  all  centers.  The  most  dangerous 
objects  and  the  most  threatened  centers  are  determined. 

A convenient  procedure  for  analyzing  the  results  is  used;  one  in  which 
.equi -probable  contours  are  plotted  for  the  input  grid.  Along  the  Ecu 
contours,  the  values  of  E?u  are  constant.  Any  one  contour  represents 
-the  locus  of  all  potential  target  points  that  result  in  an  unprotected 
casualty  expectation  of  the  magnitude  specified.  With  such  a display, 
-the  optimum  target  point  is  readily  determined.  Contours  of  constant 
•sheltered  casualty  expectation  would  show  the  improvement,  provided  all 
people  were  in  available  shelters.  Balanced  risk  contours  would  show 
the  casualty  expectation  weighted  with  "reaction"  factors. 

TARGOP  is  an  extremely  valuable  and  useful  tool  in  the  planning  phase  of 
a missile  test  program.  It  serves  as  a measure  of  when  to  recommend  the 
use  of  shelters,  when  to  evacuate  if  the  threat  is  relatively  high,  or 
when  evacuation  is  not  necessary  because  of  a low  threat.  Further,  the 
specific  centers  requiring  notification  can  be  identified  well  in 
advance  so  that  sufficient  time  is  available  to  modify  plans  and  reduce 
risks. 

Functionally,  the  data  inputs  to  TAR60P  are  of  three  types:  debris 
characteristics,  population  center  characteristics  and  geographical  data 
used  in  plotting.  The  procedure  for  TARGOP  usage  is  illustrated  in 
Figure  4-4-6. 

Data  concerning  the  impacting  fragments  associated  with  normal  flight 
and  up  to  seven  failure  modes  must  be  supplied.  This  data  is  subdivided 
into  three  groups:  (1)  physical  characteristics,  (2)  impact  points  and 
(3)  uncertainties  in  the  impact  point  data.  The  number  of  fragments  and 
probability  of  occurrence  of  each  event  (normal  flight  or  failure  mode) 
must  also  be  entered. 

Population  center  characteristics  in  terms  of  position,  area  and  pop- 
ulation residing  in  various  levels  of  shelter  for  each  center  must  be 
supplied.  Geographical  data  must  be  supplied  defining  the  area  for  risk 
contour  plotting  and  for  informational  background  display.  Additionally, 
special  symbol  plotting  may  be  utilized  to  denote  any  special  interest 
locations  such  as  ship  locations  or  temporary  shelters. 

TARGOP  is  basically  a hazards  analysis  program  that  has  two  significant 
features:  (1)  it  retains  information  on  the  effect  of  any  fragment  on 
any  population  center  and  (2)  It  rapidly  produces  many  hazards  analyses 
over  a grid  of  target  points.  Figure  4-4-7  is  a flowchart  of  TARGOP. 
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Figure  4-4-7  (Co'nt.).  TARGOP  Flowchart 
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After  computing  the  coordinates  of  the  first  grid  point  and  transforming 
the  population  center  data  and  fragment  data  to  the  x,  y topocentric 
coordinate  system,  TARGOP  selects  the  first  fragment  and  computes  the 
risks  for  each  population  center,  storing  the  result.  It  then  selects 
the  second  fragment  and  repeats  the  computation  of  risk  for  each  popula- 
tion center,  storing  the  results  for  each  fragment.  This  process  is 
repeated  until  all  fragments  in  the  debris  list  have  been  covered. 

Having  completed  the  computations  for  the  first  grid  point,  the  second 
grid  point  coordinates  are  computed  and  the  whole  process  defined  above 
is  repeated  until  all  625  grid  points  (maximum)  have  been  covered.  The 
data  is  then  written  onto  a tape  for  automatic  processing  by  the  CONTUR 
Program. 

In  the  event  that  analysis  of  only  a single  grid  point  is  required,  the 
computation  process  discussed  above  is  performed  twice.  The  first  time 
reverses  the  computation,  l.e.,  th*  first  population  center  is  selected 
and  risks  are  computed  for  each  fragment.  Again,  subtotals  for  each 
population  center  are  retained.  By  so  doing,  one  obtains: 

1.  The  total  risk  produced  by  all  fragments  on  any  specific  popula- 
tion center  of  interest. 

2.  Total  risk  for  a given  fragment  on  all  population  centers.  The 
dual  computation  procedure  is  not  employed  when  performing  a full  grid 
analysis. 

The  TARGOP  grid  data  is  passed  to  the  CONTUR  Program  and  the  CONTUR 
execution  is  performed  automatically.  The  CONTUR  flowchart  is  presented 
in  Figure  4-4-8.  CONTUR  is  a computer  graphics  program  written  for  the 
purpose  of  generating  two-dimensional  plotter  drawings  from  "risk  surface" 
information.  The  program  takes  the  risk  data  defined  on  a grid  and 
produces  contour  curves.  CONTUR  fits  a smooth  curve  through  a string  of 
grid  cells  representing  the  contour  line.  These  strings  of  curves  are 
linked  together  in  chains  and  associated  with  continuous  "topographic 
elevation  lines."  A third  order  polynomial  is  used  to  fit  contour 
lines  to  coordinate  points.  First,  the  program  assumes  that  the  "altitude" 
change  between  any  two  nodes  is  linear  and  finds  all  points  along  the 
lines  between  points  that  are  contour  elevations.  It  then  pairs  points 
that  are  within  the  same  cell  - in  the  same  column  and  row  area  - and, 
finally,  it  connects  these  pairs  of  points  (line  segments)  in  a line 
which  is  then  plotted.’  The  CONTUR  procedure  is  known  as  a "localized 
cubic  spline  procedure"  having  the  unique  feature  that  only  two  rows 
in  the  grid  are  processed  at  a time,  obviating  the  need  to  read  into 
core  the  whole  grid.  As  used  with  TARGOP,  CONTUR  Is  limited  to  25 
columns  and  25  rows. 

All  TARGOP  modeling  calculations  are  accomplished  In  one  of  three  basic 
coordinate  systems.  In  a global  sense  a spherical  Earth  is  assumed.  In 
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Figure  4-4-8.  CONTUR  Flowchart 
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Figure  4-4-9.  Relevant  Coordinate  Systems 
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Longitude  end  latitude  sre  , 

matrix  relationship.  ted  t0  x and  * coordinates  through  the 


x - si"\> 
yh  R >cosA0sin^0 

2'  COSA6COS<>0. 


COSAq  0 1/C0SAC0S^  - COSA0COS*0  (20) 

s1nA0sin*0  cos*0  JsinAcos*  - sinA0cos*0 
s1n*0cos<fi0  sin^0  ( sin*  . sin^ 


where 


2 Is  measured  upward  from  the  Eartn's  surface. 
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Expanding  equation  (20),  It  Is  shown  that 

x = R cos$sin  (a-a0 ) (21) 


and 

y * 'R  [sin$cos<j>0  - s1n$0cos$  cos  ( A- x0) ] (22) 

Now  If  aa  = x-A0  and  A4>  - 4>-cj>  are  small,  i.e.,  less  than  10°,  then  it 
is  reasonable  to  assume  that  0 

sin  (a  - A0)  = aa  (23) 

cos  (a  - a0)  = 1 

sin  ($  - *0)  s W 

Then  equations  21  and  22  reduce  to 

x = Raa  cos<|)  (24) 

y = RA<f,  (25) 

which  are  familiar  expressions  for  relating  increments  of  longitude  and 
latitude  to  nautical  mile  distances  east  and  north.  The  approximations 
in  equation  23  are  reasonable  because  the  normal  range  of  values  is  less 
than  4°. 

Up range  and  cross range  coordinates  are  related  to  x and  y coordinates 
through  the  matrix  relationship 


> = 


simjjj  - cos<}ij 


cos^j  si  nipj 


V 

► ' 

x. 

+ ( 

J 

vj 

yj 

, i 

(26) 


The  angle  is  measured  clockwise  from  north  and  is  commonly  referred 
to  as  the  "back  azimuth"  because  it  is  the  reentry  azimuth  minus  180°. 

As  noted  earlier,  there  are  three  groups  of  debris  data  required  to 
adequately  describe  the  target  area  risk  situation.  They  are  physical 
characteristics,  impact  points  and  impact  uncertainties 


Impact  kinetic  energy,  weight,  ballistic  coefficient.  Impact  velocity 
and  lethal  area  comprise  the  physical  characteristic  group  but  not  all 
of  these  items  need  be  specified.  In  all  cases,  lethal  area  is  required. 


The  purpose  of  the  other  items  is  to  compute  kinetic  energy.  If  the 
kinetic  energy  is  already  known  for  a fragment,  the  weight  ballistic 
coefficient  and  Impact  velocity  are  not  needed. 

If  the  impact  kinetic  energy  is  unknown,  the  program  will  compute  it  in 
two  possible  ways.  If  the  woight  and  impact  velocity  are  specified  by 
the  user,  the  kinetic  energy  is  computed  as 

K.E.  (27) 

where 

W = weight 

V = impact  velocity 

g = gravitational  acceleration 

If  the  weight  and  ballistic  coefficient  are  specified  by  the  user,  the 
kinetic  energy  is  computed  as 


where 

W = weight 

0 = ballistic  coefficient 
p = air  density  at  sea  level 
g = gravitation  acceleration 

Impact  point  data  is  comprised  of  the  coordinates  of  impact  points  and 
the  back  azimuth  of  the  path  the  fragment  traveled  prior  to  impact.  The 
impact  points  may  be  given  optionally  in  latitude  and  longitude  or  In 
uprange  and  crossrange  distances  from  the  target  point.  The  data  for  a 
particular  fragment  may  be  in  either  form,  independent  of  the  form  used 
for  any  other  fragment. 

The  TARGOP  model  has  been  extended  to  handle  normal,  exponential  and 
uniform  PDFs  for  fragment  impact  uncertainties.  Also,  these  distribu- 
tions may  be  mixed  uprange  and  downrange,  and  have  different  variances 
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uprange  and  downrange.  The  crossrange  distribution  Is  assumed  normal. 
The  forms  of  the  distributions  are  presented  below. 

The  Integral  of  the  probability  density  function  over  the  population 
center  area  represents  the  probability  that  the  fragment  will  impact 
somewhere  on  the  population  center. 

The  general  form  for  the  normal  density  function  Is  given  by 


f (u) 


where 


prrL.  exp  [-  ~ ] , - oo  <_u  < + 

^To  2 o ~ 


standard  deviation 


•'M 


u • uprange  coordinate 

If  the  distribution  Is  about  the  Impact  point  of  the  fragment,  y * o. 

The  exponential  density  function  Is  a less  common  distribution,  but 
Important  In  modeling  fragment  debris  from  missile  failures.  The  general 
form  Is  given  by 


f (u)  « xe  , u > 0 


» u £ 0 


p 


where 


1/A  » standard  deviation 
a ■ mean  of .distribution 


R'. 

it 


The  uniform  distribution  Is  also  useful  In  modeling  fragments  emanating 
from  missile  failure.  The  general  form  Is 

f (u)  • 1/  (b-a)  , a < u < b (31) 

■ 0 elsewhere 
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Each  of  the  nominal  flight  fragments  usually  has  a corresponding  3o 
ellipse  such  as  that  Illustrated  In  Figure  4-4-10. 
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Figure  4-4-10.  3a  Uncertainty  Ellipse  for  jth  fragment 

It  Is  useful  to  display  the  total  "footprint"  of  impacting  debris  by 
plotting  each  of  the  ellipses  on  a background  of  the  target  area.  The 
required  equations  for  plotting  these  ellipses  are  developed  below. 
Figure  4-4-11  Illustrates  the  normal  PDF. 


The  equation  for  the  3a  ellipse  of  the  jth  fragment  Is 
<Uj)2  / (3a  uj)2  + (Vj)2  / (3a  vj  )2  * 1 


(33) 
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“J*  vj 


°uj*  avj 


are  the  uprange/crossrange  coordinates  of  the  jth 
fragment  impact  points^and 

are  the  standard  deviations  in  the  corresponding 
directions. 


Figure  4-4-10  shows  these  relationships  graphically.  It  is  99.5  percent 
probable  that  the  jjth^  piece  would  land  within  the  ellipse  in  Figure  4-4-11 
where  the  center  is  the  nominal  impact  point. 

Tc  obtain  points  on  the  perimeter  of  the  ellipse,  a parameter  1c  is 
introduced,  and  the  equation  for  the  ellipse,  equation  33,  is  rewritten 
in  the  parametric  form 


u?  = 91^. 
j uj 


(34) 


V2  = 9 (1-P)  o* 


vj 


(35) 


The  Uj  and  Vj  values  can  then  be  directly  computed  as  follows: 


°uj 


* 3k 


(36) 


a * * 3 /'l-F* 

vj 


(37) 


where 


0-  < k < 1 


(38) 


To  save  computer  time,  the  coefficients  (i.3lc)  and  (*  3v£?j^  ) have  been 
precomputed  for  49  values  of  k.  The  values  of  k were  chosen  so  that  the 
points  are  not  equally  spaced,  but  are  closer  together  when  uj  and  v^ 
are  near  zero.  This  means  the  plotted  ellipses  should  be  fairly  smooth, 
even  in  the  areas  of  expected  high  curvature. 
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A TARGOP  user  may  specify  different  1-sigma  values  uprange  and  downrange. 
If  so,  TARGOP  will  use  the  larger  of  the  two  as  the  1-sigma  value  to  be 
used  in  plotting.  The  (u,  v)  coordinates  of  each  point  on  an  ellipse 
are  obtained  by  multiplying  the  precomputed  coefficients  by  auj  and  ovj, 
respectively.  Letting  n denote  the  point  number,  the  corresponding  J 
(x,y)  coordinates  are  then  given  by 


x. -  sint^  - cosiK  u.  x. 

J = J J J + J 

y,  cosiju  sinifu  v.  y. 

J J J J j 

where 

(xj,  Yj)  is  the  center  of  the  ellipse  - the  impact  point  for 
the  fragment. 

Information  required  for  the  centers  is  .integrally  related  to  the  method 
used  for  computing  Ec5,  sheltered  casualty  expectation  (discussed  later). 
Two  approaches  are  optionally  available  in  TARGOP  for  the  Eps  computation: 
one  will  be  referred  to  as  the  "discrete  method"  and  the  other  the  "con- 
ti',,,r"s  method."  Both  methods  require  the  center  area,  position  in  lat- 
• i longitude,  population,  and  balanced  risk  factor. 

K Jiscrete  Ecs  method,-  the  approach  has  been  to  divide  the  pop- 
ulation of  a given  center  into  four  categories: 

Category  I.  That  portion  of  the  population  residing  in  structures 
capable  of  resisitng  impacting  fragments  with  kinetic  energy  not  greater 
than  516868  ft-lbs.  This  corresponds  to  heavy  reinforced  structures,  or 
people  on  the  lower  floors  of  tall  buildings. 

Category  II.  That  portion  of  the  population  residing  in  structures 
capable  of  resisting  impacting  fragments  with  kinetic  energy  not  greater 
than  28856  ft-lbs.  This  corresponds  to  medium  reinforced  structures. 

Category  III.  That  portion  of  the  population  residing  in  structures 
capable  of  resisting  impacting  fragments  with  kinetic  energy  not  greater 
than  1045  ft-lbs.  This  would  include  people  in  light-roofed  structures 
made  of  sheet  metal,  shingles,  etc. 

Category  IV.  That  portion  of  the  population  in  the  open  to  which 
there  is  no  threat  from  fragments  having  an  energy  less  than  35  ft-lbs. 

The  number  of  people  in  each  category  is  then  defined  on  each  population 
library  card. 
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For  the  continuous  Ecs  method,  additional  information  is  required  which 
defines  the  kinetic  energy  of  resistance  of  the  most  protective  structure, 
its  plan  area,  and  the  number  of  people  expected  to  occupy  it  during  the 
reentry  of  debris.  Similar  data  must  be  supplied  for  the  least  protective 
structure. 

The  computation  of  impact  probability  (Pj)  is  discussed  here  as  it 
applies  to  the  various  PDFs.  Impact  probabilty  has  two  components,  Pq 
(uprange  or  downrange)  and  Pc  (crossrange),  and 

Pr  * P_  . P„  . P . (40) 

I D C event 


where 


PD  ‘ Pu  + Pd 


pevent  = Probability  of  occurrence  of  event  which  produced  fragment. 

The  TARGOP  model  permits  the  user  to  define  different  forms  of  PDFs  up- 
range and  downrange.  Therefore,  there  are  really  several  Integrations 
to  obtain  Pq  and  Pc,  depending  on  the  position  of  the  population  center: 

1.  If  the  population  center  lies  wholly  downrange  of  the  fragment 
impact  point,  only  the  downrange  PDF  needs  to  be  integrated  to  obtain 

PD- 

2.  If  the  population  center  lies  wholly  downrange  of  the  fragment 
impact  point,  only  the  uprange  PDF  needs  to  be  Integrated  to  get  Pq. 

3.  If  the  population  center  lies  partially  uprange  and  partially 
downrange  of  the  fragment  impact  point,  both  uprange  and  downrange 
distributions  must  be  integrated  to  obtain  Pq  * pu  + P^. 

The  various  possibilities  are  discussed  below. 

For  the  crossrange  Impact  probability  Pr,  the  PDF  is  given  by 


fj(v)  - 
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where 

ocj  = crossrange  standard  deviation, 
v * crossrange  coordinate. 

Integrating  fj(v)  over  the  crossrange  limits  of  the  1th  population 
center,  J 


Pdj  * 


?1j  fj  (v)  dv 


where 


c i j * vc1j  - °'5  ** 


diJ  * vcij  + °'5  ^ 


V H * crossrange  coordinate  distance  to  the  center  of  the 
J population. center, 

Ac-j  a area  of  population  center. 


more  specifically, 


v . = - cos*.  (xci-xj)  + sin*j  (Vci-Yj) 


Letting 


V » v/(/2  o c1). 


the  Integral  in  equation  43  takes  the  form 


Pcij  * G 


1 p 

* / 

Jr* 


e'^2  dv 
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where 


c1j  * c1j/  {/*  °cj} 


(49) 


J1j  " 


d-n/  (Sz  ^cj) 


(50) 


The  integral  expressed  in  equation  48  is  tabluated  for  a wide  range  of 
limits.  The  tabular  integration  approach  is  much  faster  than  direct 
functional  evaluation,  requiring  very  little  additional  computer  storage 
to  achieve  very  accurate  results. 

In  developing  the  downrange  impact  probability  (Pd),  there  are  three 
possible  forms  of  PDF  available  in  TARGOP.  Each  must  be  treated  sep- 
arately as  it  applies  uprange  or  downrange. 

The  normal  PI;*'  is  given  by 


fi  (u) 


exp 


1 u 

2 °dj 


(51) 


Integrating  over  the  normalized  downrange  limits  of  the  1th  population 
center. 


Pdij  ~ 


f 


-u”2  — 

e du 


Au 


(52) 


The  exponential  PDF  may  be  written 

fj(u)  u<0 


(53) 


Integrating  over  the  downrange  limits  of  the  1th  population  center, 


P « 0 
aif 


< (*  •'•«) 


du 


(54) 
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The  uniform  PDF  may  be  written 


f ( u ) ~ r—*- 

J /l2  0 


/TT 


dj 

0,  elsewhere 


12  “10 


(55) 


These  same  general  form  equations  apply  in  calculating  the  uprange 
impact  probability  Pu. 

The  total  impact  probability  computation  for  one  or  more  fragments  Is  of 
the  standard  form 


(PI>n  * 1 - ('  ‘ V" 


(56) 


where 


n is  the  number  of  fragments  and  , 

P*  is  the  impact  probability  for  one  fragment  impacting  the  popula- 
tion center. 

The  total  impact  probability  for  M population  centers  and  N fragment 
groups  is  given  by 


M 


(Pt) 


I'  TOTAL 


i=l 


N 


E E 

j=i 


(Pj)  U 


(57) 


where 

(Pt)  • • is  the  probability  that  the  jth  fragment  impacts  the  1th 
J population  center. 

Two  limiting  computations  for  casualty  expectation  have  been  Incorporated 
into  TARGOP.  Unsheltered  casualty  expectation  (Ecu)  Is  based  on  all 
people  being  in  the  open  with  no  protection  and  no  limitation  on  the 
kinetic  energy  which  might  be  required  to  cause  a casualty.  Sheltered 
casualty  expectation  (Ecs)  considers  the  benefit  of  shelters  which  may 
protect  the  people. 
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Ecu  is  a convenient  upper  bound,  representing  the  maximum  number  of 
possible  casualties.  It  is  computed  with  the  equation 


(E„J 


cu' TOTAL 


M 


E 

i=l 


N 


E 

j=i 


(fVij  pci 


A.  • "< 

Lj  j 

(6076.1); 


(58) 


where 

(Pj)^j  * probability  of  impacting  1th  center  with  ith  fragment, 
pci  = Nci/Aci  = P°P«1ation  density  of  ith  center, 

N ^ 3 total  population  in  ith  center, 

Aci  = total  ^antl  area  center»  square  nautical  miles. 

Ay  = lethal  area  of  jth  fragment,  square  feet, 

nj  = number  of  fragments  with  characteristics  identical  to  the 
jth  fragment, 

M 3 total  number  of  population  centers, 

N = total  number  of  distinct  fragment  groups. 

There  are  two  methods  of  determining  the  sheltered  casualty  expectation 
(E  ) - the  discrete  and  the  continuous  method.  Under  the  discrete 
metnod  of  Ecs  calculation,  the  kinetic  energy  (KE)j  of  the  jth  fragment 
is  either  read  as  input  data  or  computed  using  equation  27  or  28.  It  is 
then  necessary  to  find  the  probabilities  of  penetrating  each  of  the  four 
classes  of  protection.  The  relationships  which  are  assumed  to  exist 
between  the  impacting  fragments  and  the  resisting  structures  are  illus- 
trated in  Figure  4-4-12.  Quantitatively,  let  (pj()ij  be  the  probability 
of  penetrating  the  Kth^  structure  class  in  the  itl^  center  with  the  jthi 
fragment.  The  total  affected  population  at  the  ith  center  by  the  jth 
fragment  is  then  given  by 


(AFP) 


ij 


E 

K=1 


cKi 


<PK)lj 


(59) 
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Figure  4-4-12.  Energy  Relationships  between  Impacting 
Fragments  and  Resisting  Structures 


A.*'V^Jt^*5r'»T  - 'srtjr* 


where 


NcKi 


= population  in  class  K structure  at  ith  center. 


{pK). , = probability  of  penetrating  Kth  class  of  protection  at 
ith  center  with  jth  fragment. 


The  total  casualty  expectation,  E , is  then  given  by 

V J 


M 

^cs^  TOTAL  = ^ 
i=l 


(pl)  i.i  (AFP)iA.ini 

(Aci  (6076. I)2 


(60) 


The  continuous  method  for  computing  Ecs  is  based  on  the  fact  that  popu- 
lation centers  often  have  a multitude  of  shelters  that  vary  considerably 
in  their  capability  to  protect  people.  Some  provide  very  little  protec- 
tion, while  others  are  virtually  impregnable.  With  this  method,  it  is 
assumed  that  a continuous  variation  in  protection  exists  over  the  popula- 
tion center. 

The  key  to  the  concept  is  the  "casualty  density  function,"  shown  in 
Figure  4-4-13.  People  in  shelters  with  kinetic  energy  of  resistance 
greater  than  the  impact  energy  are  safe;  the  others,  unsafe. 


Figure  4-4-13.  Casualty  [tensity  Function 
for  a Population  Center 


4-4-36 


Em-jn  is  the  kinetic  energy  of  resistance  for  the  least  protective  shelter 
and  Emax  is  the  kinetic  energy  of  resistance  for  the  most  protective 
shelter.  As  the  figure  indicates,  it  is  assumed  that  the  casualty 
density  function  varies  linearly  with  energy,  thus 

F,.  3 Ci  E + c2  (61) 


where 


Ci  and  c2  are  constants  for  the  particular  population  center  and 
are  determined  as  follows: 

The  integral  of  F is  the  "sheltered  casualty  density" 

KE 

ps  3 j nf  Fc  dE  (62) 

Emin 

where 

KE  = kinetic  energy  of  impacting  fragment 
nf  = normalizing  factor. 

The  normalizing  factor  is  introduced  to  ensure  that  the  total  integral 
from  minimum  to  maximum  energy  produces  the  population  density  p,  thus 


where 


^max 


dE 


N - total  population* 

A = total  area  of  center. 
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(63) 


k wr  ■»  4 


- *** *, r • ±5»-~  • 


Substituting  equation  61  into  63  and  solving  for  n^. 


nf  “ N/A  [0. 5cx  (Ej^  - E^n)  + c£  (Emax  - Emi-n)] 


(64) 


Ec$  is  then  computed  using  equation  62  for  ps  instead  of  using  p as  with 


unsheltered  casualty  expectation-  Thus,  the  equation  for  Ecs  is 


M 


(Ecs) 


N 

V' 


cs^ TOTAL 


EE 


(Pi)  . . p A,  . n. 
1 U su  Lj  j 


(6076.1 ): 


(65) 


i=l  j-1 


where 


p • - = casualty  density  for  1th  population  center  due  to  jth 
fragment. 


The  values  of  the  F function  at  E • and  Ema„  are  determined  as  follows: 
c mm  max 


"mm 


No.  of  People  in  Minimum  Protective  SheHer 
(Area  of  Shelter)  (Energy  of  Resistance  of  Shelter) 


N/i 


max/ 


^min  cmin^ 


No.  of  People  in  Maximum  Protective  Shelter 


'max 


?pi  ^ 

(Area  of  Shelter  ) ( Energy  of  Resistance  of  Shelter) 


N'W/<A|rax  F™x> 


It  is  often  the  case  that  one  particular  population  center  is  much  more 
politically  sensitive  to  impacting  debris  than  another.  This  Is  markedly 
so  when  an  island  with  a native  population  is  compared  to  one  inhabited 
solely  by  US  military  personnel.  Certainly,  it  is  undesirable  to 
impact  the  military  installation,  but  it  could  be  much  worse  for  the 
test  program  if  the  native  population  were  endangered.  To  account  for 
these  subjective  differences,  factors  should  oe  introduced  to  the  popula- 
tion library  which  reflect  the  relative  "reaction  sensitivty"  for  each 
center. 


^ v- 1 
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First,  a reference  population  center  is  chosen  with  an  Rc^  factor  of 
1.0.  Each  of  the  remaining  centers  Is  then  assigned  a reaction  sensitiv- 
ity greater  than  1.0.  These  factors  are  taken  as  multipliers  in  computing 
E?u,  and  the  final  result  Is  termed  "balanced  risk"  because  the  popula- 
tion centers  have  indeed  been  balanced  with  regard  to  the  undesirability 
of  impacting  them.  Balanced  Risk  (Rc)  Is  computed  as  follows  and  should 
be  compared  to  equation  58. 

M N 

(Rc) TOTAL  3 £ £ 

i*=l  j=l 

where 

R . **  reaction  sensitivity  factor  r«r  ith  center  relative  to 
C1  a reference  center. 

All  of  the  preceding  model  development  has  been  concerned  with  a single 
target  point.  But  the  main  purpose  of  TARGOP  is  the  construction  of 
target  point  contour  plots.  The  underlying  assumption  which  is  made  to 
produce  the  plots  Is  that  the  impacting  fragment  characteristics  remain 
constant  from  grid  point  to  grid  point.  This  is  illustraed  in  Figure  4-4-14. 


tw^  *-w»  • 


f 


TARGOP  are  bSR  one^ti™?  winf S?^si<,ns-1etc-''  sathered  to  run 
rerafns  constant  for  pSl“T«Srt  thlt  .S2*?,e  f0,nt  A'  Th,s  *“a 
lated  by  the  amounts  ax,  Ay.  Tto^assumDMn!!^  P°i?JS  must  be  trans“ 
distances  ax.  Ay  are  not  so  i,  !!  a*sJmPt1on  1*  valid,  provided  the 

the  trajectories  for  points  A and  B t?hfa¥fSr^9n1f1cant  di Terences  in 
array  of  such  alternate ^ target  gH^ooIntJ?^  ^del  is  based  a" 
permu  constructing  contour  plots  wh1?h  Jr^M^??erS  ]arge  enou9h  to 
tinuous  variability  of  the  computer  rlskfhiy  represent  the  con- 

SespecifylSgreiS9cenS  p^f  (Jy  \and4 the  ^id  is  positlone 

z 'r  "?«««■■ p.-  ecu.  Erj:  «*-■*.  *a  r, /: trinj-:°uruk 


i-unipureG:  pT  r c iuur  risx 

Such  numbers  are  characteristic?? * d,?c;  al]  of  wb^cb  ar9  totals, 

the  range  of  risks  greater  than  lO'^^ni  I?  TAR60P  are  limited  to 
risks  to  these  values,  the  contouring  ?I.?esJ  t,an  L0\  limiting  the 
enhance  the  analysis,  the  loaari+hme9  *nfuys^s  simplified.  To  further 

0,  then  the  resfithmltlpliidto  1 o*  are  take"  *<>  the  base 

identified  bv  an  integer  so  that  a fevlw  Resu1tant  contour  levels  are 
stant  at  1CT*  along  the  curve  etc  LtV*  mans  the  risk  Is  con- 
alternate  target  point  and  1 /ny  po*nt  on  such  a curve  is  an 
population  library  is  l’o"4  If  the  c??anS  tbat  tbe  bazard  to  the 
question.  The  CONTUR  progrm  Is  blwd  In  XT*  tar9et?d  at  «*  Point  in 
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4.5  WHITE  SANDS  MISSILE  RANGE  (WSMR)  RISK  ANALYSIS  TECHNIQUES 

4.5.1  Range  Safety  Authority 

The  commanding  General , White  Sands  Missile  Range,  New  Mexico,  is 
responsible  for  assuring  that  there  are  no  unreasonable/unnecessary 
hazards  associated  with  tests  conducted  at  WSMR.  The  responsibility  for 
performing  this  function  has  been  delegated  to  the  Missile  Flight 
Surveillance  Division,  WSMR. 

4.5.2  Minimizing  Risk 

WSMR  operates  under  the  philosophy  that  all  tests  are  potentially 
hazardous,  and  that  no  risk  is  acceptable  if  a test  can  otherwise  Le 
conducted  in  a prudent  and  cost  effective  manner.  Risks  are  minimized 
by  design  characteristics  of  the  test  article,  including  redundancy 
of  vital  control  elements,  and  by  use  of  a flight  termination  system 
(FTS)  where  required.  Operational  practices  to  reduce  risks  include 
non-essential  personnel  evacuations,  positive  protection  of  essential 
personnel  in  test  areas  such  as  blockhouses,  barricades,  shelters  and 
roadblocks;  and  test  scenarios  designed  so  that  the  test  objectives 
are  met  with  the  lowest  risk  exposure  to  essential  participating 
personnel  and  high  value  property.  Thus,  the  basic  policy  of  the  WSMR 
flight  safety  program  is  to  take  all  prudent  and  reasonable  means  to 
reduce  risks  in  light  of  national  program  interests,  program  objectives, 
risk  levels  to  life  and  property,  costs  and  risk  to  the  test  itself. 

4.5.3  Risk  Analysis 

Risk  analyses  are  not  performed  for  all  tests  conducted  at  WSMR.  Studies 
are  normally  performed  when  personnel  or  high  value  property  cannot  be 
evacuated  from  the  dispersion  footprint  of  a test.  Often  the  results 
of  the  analyses  are  used  to  position  required  manned  instrumentation 
sites  within  the  footprint  into  areas  of  reduced  risks. 

WSMR  is  concerned  with  both  single  test  risks  and  cumulative  risks 
associated  with  test  programs.  Hazards  are  evaluated  by  means  of  a 
detailed  probability  study  which  includes: 

1.  the  derivation  of  an  impact  probability  density  function, 

2.  the  assessment  of  lethal  areas, 

3.  the  computation  of  hit  and  kill  probabilities  based  upon  land 
areas  and  population  densities,  and 

4.  computation  of  impact  effect  of  missile  clean  body  and  destruct 
debris  on  those  WSMR  test  site  shelters  which  could  be  subjected  to  hazards 
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by  the  missile/vehicle  test  operations.  Normally,  the  debris  from  an 
aerodynamic  missile  must  be  contained  so  that  existing  shelters  provide 
adequate  safety. 

Since  most  tests  at  WSMR  are  not  general  in  nature, use  of  generalized 
risk  programs  or  models  is  often  not  feasible.  Thus,  WSMR  conducts  a 
variety  of  different  types  of  tests: 

1.  Full  scale  drones 

2.  Subscale  drones 

3.  Area  Air  Defense 

4.  SHORADS 

5.  Lasers 

6.  Medium  Range  Ballistic  Missiles 

7.  Atmospheric  Probes 

8.  Cruise  Missiles 

9.  Air-to-Air;  Ai r-to-Ground 

10.  NASA  Shuttle  Tests 

11.  Re-entry  Vehicle  Tests 

12.  Projectile  Tests 
4.5.4  General  Risk  Programs 

In  general,  each  test  has  characteristics  that  require  an  entirely  new 
model  to  be  developed.  However,  WSMR  does  possess  two  general  risk  pro- 
grams that  are  used  extensively.  The  first  is  KILL  - used  mainly  for 
PERSHING,  but  can  be  used  and  modified  for  many  other  applications.  The 
second  is  RISK  - produces  drone  impact  dispersion  footprints  relative 
to  a given  intercept  point  and  can  be  modified  for  other  applications. 

WSMR  is  currently  developing  a general  purpose  program  called  "Risk  to 
Test."  The  purpose  of  the  program  will  be  to  determine  the  WSMR  real- 
time system  reliability  for  any  specific  test  or  test  program.  The 
program  will  also  assist  WSMR  in  identifying  trouble  support  elements 
inhouse  and  thus,  by  correction,  Increase  the  probability  of  successful 
tests  at  WSMR. 


Risk  analyses  have  been  performed  for  specific  tests  at  WSMR  and  can  be 
obtained  by  request.  The  following  is  a list  of  these  analyses: 

1.  Formal  reports  and  other  documents: 

a.  "Population  Comparison  of  Two  Corridors,"  10  February  1975. 

(Draft) . 

b.  "PERSHING  Kill  Probability  Study,"  6 March  1975. 

c.  MFR,  "One  Vehicle  Running  a Roadblock  on  Highway  70  During 
a Hawk  vs  Drone  Mission,"  30  April  1975. 

d.  MFR,  "Discussion  of  Recommendations  for  Solution  to  Problem 
of  PERSHING  Second  Stage  Debris  Impacting  in  the  Bosque  del  Apache  Wildlife 
Refuge,"  17  dune  1975. 

e.  Technical  Report,  NR-M  W5.  "Launch  Site  Study  PERSHING  II," 
1 July  1975. 

f.  Technical  Report,  NR-M  2-75,  "Power  Line  Hit  Probability," 
(PII  Launch  at  Cage,  Arizona),  Undated. 

g.  Technical  Report,  NR-H  3-75,  "Hazard  Analysis,  Wingate 
Roadblock  Study,"  10  September  1975, 

h.  "Risk  to  Aircraft  Caused  by  PERSHING  II  (Page,  Arizona)," 

(Draft). 

i.  Staff  Study,  "Off-R^  . , (WSMR)  Targeting  of  Pershing  (PII)." 

j.  Technical  Report.  .R-4'  4-75,  "Hazaru  Analysis,  PI-A 
Wingate  Firings  (Abort  Area  Si  :1  September  1975. 

k.  DF,  "PERSHING  II,  Delta,  Colorado,"  12  April  1976. 

l.  Flight  Safety  Study,  "Risks  Pursuant  to  ^QM-^A  Overflight 
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2.  Studies  currently  underway: 

a.  Hazards  to  HELNOP  by  Missiles  and  Drones 

b.  Hazards  to  HELSTF  by  Missiles  and  Drones 

c.  General  Purpose  Hazard  Analysis  Model  for  Drones  and 
Missiles  (In  use  but  undocumented) 

d.  "Risk  to  Test"  General  Purpose  Model  (Assigned  to  Mr. 
Terry  W.  Horton) 

e.  Roland  Site  Selections  Study 


